Android Canary build 2609 ships one concrete security change: Quick Settings actions can now require device unlock before executing.
This matters because Quick Settings has long been a bypass vector. Airplane mode, hotspot, NFC, and other toggles are reachable without authentication on a locked screen. This build gates that access behind a credential prompt, giving users control over which toggles need unlock and which do not.
The full article is worth reading for the implementation details: how the setting is scoped, whether it applies per-tile or globally, and how Google is surfacing it in the UI. Those specifics will determine whether this is a real security hardening or a buried option nobody finds.
[READ ORIGINAL →]