I suppose they could be putting some of their pervware within the ARM TrustZone, but that seems excessive.