Google's Project Zero explains how the practice of altering the Android kernel by phone vendors like Samsung lessens security by adding attack surface
Google Project Zero scolds Samsung and other vendors for adding features that undermine Android security.