Comment by securitypunk

Anyone who has managed a product security program will tell you that's it's impossible for small groups to keep up with the complexity and attack surface of products like android.

From a consumer perspective, going with A and trusting the company is by far the safest option.