if all that makes their phones secure is "not allowing sideloading" or "not allowing different browser engines", then that's a pretty shit security