My understanding is that Android devices with custom images (SELinux-type-stuff compiled into the kernel) have been allowed on their network for some time. This wasn't just contractor-spec custom hardware - employees were allowed to use their personal Android devices provided this stuff had been installed.

So, the big news here is that that's no longer required, and that stock Android devices will now be allowed.