It isn’t “impossible.” People have been analyzing assembly language programs and hacking them since the dawn of personal computers. How do you think Google has been able to find exploits in iOS? I have no idea why people think that assembly language is the language of wizards.

Between the binary blob drivers that the OEMs don’t even have access to and Google Play Services, Android is equally hard to audit.