> at the Android level, if the user dials an emergency number, don't use the default "Calling app" and use a special "safe" calling app to ensure the call succeed even if a user-installed app is misbehaving.

That doesn't make sense, the user has to pick the app to dial with before they have an interface to enter the number.