Yeah I meant the OEM situation. If google cared for Android user's security there would've been a certificate a long time ago. Where Apple might be overprotective (certs for charging cables), Google is absolutely negligent.