daemonize

Not to mention that one can tether via Bluetooth or USB in addition to WiFi hotspot. How are they to distinguish between someone using their hotspot via either of those two transports? I don't see them having a technical means that could distinguish someone USB tethered to cell phone using its data plan from just a cell phone using LTE data.

Even in a multiple-thread scenario?

Don't worry, each vendor will have an opportunity to screw up SE for Android policy. Additionally, many kernel flaws will be possible to use for disabling these mechanisms to once again get privilege sufficient to write to /system if needed.

I believe banks would be better served sending emails with links that open their mobile app instead of popping up a web browser.

Good luck groking that mess.

Not if the private key is stored in a secure hardware token.

sounds like some bullshit to me... "we got hacked because we don't use our own shitty software." Security is a tough business. Just look @ hbgary.

I think showing the actual disassembly would help people understand. it might lose some so maybe as a side bar.