I think you're probably right, and this was one of my biggest problems with the Android platform. He did a lot of things right, but was completely wrong about security, and from what I've heard, actively stood in the way of the Chrome/ChromeOS people improving Android security.