* Set android:debuggable=false.
* Call native code through JNI only. Having a native executable on disk and exec-ing it no longer seems possible.
* Do all the Tilde Friends things in one process, without a proper sandbox, until I can wire up a restricted service worker process.
* Jam Android App Bundle (.aab) building into the makefile.
* Yuck.
