Android 10 Q beta review

Foldable phones, 5G

Since foldable smartphones are now a thing, Android Q is also introducing support for these new and exciting form factors. It's designed to enable seamless switching between an inner and an outer display, better multitasking on larger screens, and adapting to different screen dimensions.

Android Q also has 5G support built-in, not that that was a prerequisite for us to see 5G capable smartphones - these already exist and they all run Pie. Yet Q will offer developers tools to build apps with faster connectivity use cases in mind, with enhanced AR and gaming experiences.

Modular security updates

Like clockwork, not a year goes by and not one Google I/O conference passes without the company triumphantly announcing that it's improving the dire update situation in the Android world. Spoiler alert: while some of its past initiatives in this domain have helped somewhat, the improvements so far have been extremely small. Maybe this time it will be different?

Don't hold your breath. So now that we got modular Android OS feature updates out of the way (those launched with Pie and someone should tell OEMs about them, perhaps), the next bullet point is obviously security patches. Like with all updates, some third party manufacturers are better at pushing these out in a timely manner than others, but seeing a security patch per month from all OEMs is still a pipe dream.

Enter Project Mainline. This is supposed to let Google (with an OEMs permission, and this is important to keep in mind) update some parts of the underlying OS in the background, like an app update. The updates will come through Google Play, actually, and they will patch some core OS components.

So, in theory, Google could be pushing these to your non-Google phone and it'll get more secure without you having to wait for a full-blown system update from its manufacturer. This should "accelerate" the delivery of security fixes, privacy enhancements, and consistency improvements across the ecosystem, though by how much remains to be seen.

According to Google, last year's Project Treble resulted in a 2.5x acceleration in the adoption rate of Pie compared to Oreo, but that's Misleading Phrasing 101 because the timely update situation used to be horrendous and now it's graduated to just dire.

With Mainline, Google says it will be able to deliver fast fixes for critical security bugs, like those relating to media components, which have been modularized (and media-related bugs accounted for 40% recently patched Android vulnerabilities).

The company is also going to improve its permissions system as it needs to be in perfect order to better safeguard your data, as well as quickly address issues affecting system stability, compatibility, and developer consistency.

This all sounds fine and dandy, but given Google and Android's history around such highly touted improvements to updates, we're still skeptical. Also note that while such updates will happen in the background, you'll still need to reboot your device to see the new improvements after each one.

Encryption for everyone

Every device that will launch running Android Q will be required to encrypt user data storage up to the Advanced Encryption Standard (AES) - phones, tablets, TVs, automotive devices even. So far, low-end phones have not had encryption turned on because of the performance cost that their processors simply couldn't handle given the lack of support for hardware acceleration of encryption.

Google now has a solution: it's called Adiantum and it's a new encryption method that runs about five times faster on an old Cortex-A7 CPU than a standard AES compliant method. It can run efficiently without specialized hardware, on anything from a smartwatch to an internet-connected medical device. This should provide a huge security boost to users of cheap smartphones across the world, starting at whatever point affordable low-end handsets running Android Q will appear on the market.

Storage encryption is only half of the picture, in Android Q Google is also enabling support for TLS 1.3 by default. This is a major revision of the TLS cryptographic protocol for network communications security, and it's faster, more secure, and more private.