> Followed by a demo of someone copying the APK and the whole thing more or less working...

Isn't this how Android works though? The interface you boot into is an APK that has some more entitlements and hits some APIs. Like how should they have made it?