Re: Small surface area
It's quite true that this is a limited scenario for SwiftKey's vulnerability.
But--and this is the big thing to me-- Samsung elevated a thrid party app to system status without vetting it. It's like gving someone the keys to your kingdom and just assuming they won't hurt you. That's a naiive apporach.
Secondly, why is it that the wireless cariers have to disseminate the fix? There should be some other method to do it. I'm not sure if this is an Anroid only problem (given how many flavors of Android are out there) or something that Samsung did.
Locking the barn door after the horses are out never works, anyway