For example, we have just talked about needing to consider the rooting of Android devices when performing a risk analysis for your application, something that is clearly not part of a normal, vanilla development process. However, that trait of the Android environment is something you need to consider as your application will run in that environment.