Your User’s Password Just Became a JPEG on Disk — and You Didn’t Save It

The Android Recents snapshot, what FLAG_SECURE actually protects, and the three places where it quietly fails.