Android 17 Beta 2 shows Google borrowing security features from Chrome OS

Source: Android Authority

TL;DR

• Android 17 Beta 2 starts implementing support for restricting how Thunderbolt or USB4 devices access system memory.
• Like Chrome OS, that access can be limited by default and requires explicit user permission.
• Android’s Advanced Protection Mode may prevent you from overriding the limitation.

Android is already more than just a mobile OS, with success in the home via Android TV. Its expansion onto new device types is just beginning, and the most exciting area now is desktop and laptop computers. Aluminium OS teases a new Android‑powered way to compute, and Pixel users are trying out Android’s Desktop Mode. We’re seeing another sign of Android’s “desktop‑ification” as we dig through the changes in Android 17 Beta 2.

Supporting Desktop‑Class Hardware

Meeting the needs of desktop users requires supporting a broader range of hardware, including high‑speed wired interfaces. In Android 17 Beta 2 Google is adding support for a feature already present on Chromebooks: the ability to limit how Thunderbolt or USB4 devices access system memory.

By default, Chrome OS restricts the ability of devices connected over Thunderbolt or USB4 to obtain direct memory access. This permission represents a significant security exposure, so Google recommends leaving it disabled except with trusted devices or when performance penalties are evident.

With Android 17 Beta 2 we’re seeing the same kind of access restriction being built into Android.

Data access protection

    Allow USB and Thunderbolt devices to access system memory directly for maximum hardware speeds.
    Note: This poses a security risk, so only connect devices you trust.

Enterprise Control

Just like Chrome OS, Android is preparing enterprise tools that let IT admins control this option across a fleet of devices.

    Disabled by your IT admin

Advanced Protection Mode Integration

The feature also references Android 16’s Advanced Protection Mode.

    Disabled by Advanced Protection Mode

Google has been expanding Advanced Protection recently; earlier this week we reported new WebGPU restrictions added in the name of security.

At present, Android 17 Beta 2 testers won’t see this option on their Pixel phones—only the code references are visible. When the feature ships, it is expected to appear on the same USB Preferences screen used for file‑transfer options.

⚠️ An APK teardown helps predict future features based on work‑in‑progress code, but such predicted features may not reach a public release.