Root and emulator detection AES-256-GCM encryption for sensitive data Network security config (HTTPS-only) ProGuard/R8 obfuscation for release builds Firebase security rules with role-based access ...