Im not familiar with how experiences reporting security flaws usually go but this seems like a shockingly mild response from the google team given how severe a security flaw this was? $70,000 seems about right but I’m very surprised this was allowed to exist in Android for as long as it was?
Cool project! Thanks for sharing it