Now you can't bundle malware deep within the system "ROM" unless you want to break SafetyNet's attestation. It's a big change in that aspect.
Custom ROMs tell you that this is not true at all.
Custom ROMs tell you that this is not true at all.