The Accessibility Lockdown: How Android 17’s Advanced Protection Mode Ends API Exploitation

The report explains that many non-accessibility Android apps are abusing the Accessibility API to automate interactions, serve ads, and covertly install apps; in response, Google’s Advanced Protection Mode (AAPM) in Android 16/17 will block all non-legitimate apps from using the Accessibility API, permit only tightly defined assistive apps (screen readers, switch input, voice dictation, Braille), automatically revoke prior grants when AAPM is enabled, and disallow user exceptions to reduce the attack surface at the cost of some usability.