Earlier quoted context omitted.
there you go: http://info.lookout.com/rs/051-ESQ-475/images/lookout-pegasu...
If Android/IOS can be modified such that all apps are always place under docker style container/VM, would it help?
Re: A Grad Student Found Spyware That Could Control Anybody’s iPhone
#21a kernel exploit doesn't help you much with a docker style container. Also docker is not a VM. And iOS/Android are already way better with sandboxing than our desktop environments.