You can't install a third party app without changing a default setting. Has this malware found a way around this?

All of the Android stuff is now in mainline, l believe. So modifications to kernel source is no longer necessary.