Or, serious idea too: only allow it through ADB and only get the adb toggle with warning but no explanation as to how to use it behind the 5 taps on version number.
I’m pretty sure as soon as the instructions to get a banking app involves downloading stuff on a computer, connecting the phone, getting into cli…most people would have gone on to find the real app.
When security meets privacy. I’m worried that some independant android OS that use profiles as a means to achieve both might find themselves broken in their future iterations. Just a heads-up.