Credit: Adamya Sharma / Android Authority

Google is working on an Intrusion Detection system for Android, according to a teardown of the Play Services app.
The system will collect a log of your device/network activities that can be accessed if you notice suspicious activity across your account or devices.
Google’s code suggests this log is end-to-end encrypted and can only be accessed with your Google account password and device authentication.

Security seems to be a major focus for the upcoming Android 16 release. The company is working on an Advanced Protection Mode, but it also looks like another major security feature is in the pipeline.