Many are. However, you'd still be vulnerable via API calls to other things, like Binder exploits.