Android can get away with it, as it basically is what SELinux was made for. A device in "hostile territory" where even the user can be the "attacker".