On Android this isn't true with support for protected virtual machines.