Here is some information about the secure coprocessor that Google has invested in developing - and shipped with Pixel 2. https://www.blog.google/products/android-enterprise/how-pixe...

Disclaimer: I work for Google but not on this.