Do not grant permissions to an app that it should not need: torches and star-gazing apps don’t need access to your contacts and phone. And never grant accessibility permissions that facilitate device control unless you have a need. Once a month, scan through your phone and delete a few of the apps you no longer need or haven’t used in a long time.

A new version of the Necro Trojan malware for Android was installed on 11 million devices through Google Play in malicious SDK supply chain attacks.

This is critical because Google isn’t deleting apps from phones, and so if you have such low-quality, higher-risk apps on your device then the onus is on you to make an honest assessment and to delete— not just leave in place —those apps that fail the test.

Android 15 expands restrictions on sensitive permissions for sideloaded apps, excluding those from the Play Store or compliant third-party stores. Google aims to align with the EUs DMA by ensuring third-party app stores are as functional and secure as the Play Store.

Back in Android 13, Google introduced a new layer of protection against potentially malicious sideloaded apps by preventing them from accessing features designed for accessibility. However, if the user wanted to,