Android Activities 101

Overview of Android Activities’ interaction model and associated security considerations, highlighting how exported activities can be abused, hidden/debug screens should be removed from production, FLAG_SECURE prevents sensitive screenshots, and WebViews require careful configuration (JavaScript, mixed content, caching, debugging); it cautions against using mobile Chrome for auth due to remote debugging and recommends restricting activity exposure, removing debugging features, protecting sensitive views, and preferring securely configured WebViews for web-based tasks.