This question is intended for better understanding of security features of Android architecture.
In particular, I want to know what part of the architecture needs to be secure to prevent an attacker from gaining control of the hardware (say speaker, or microphone).
Specifically, is it the Linux Kernel, the Android OS, or the DVM?