Android devices are actually quite locked down these days it's just that you CAN shut off security features. For example I can't just download APKs in Firefox and install them without flipping a switch which triggers an explicit warning.