Android Security in 2026 (Part 1): Stopping Improper Credential Usage with Kotlin

M1 — Hardcoded secrets, leaked tokens, insecure SharedPreferences