Android Security Architect Resigns From Google Over Pentagon AI Deal

The farewell note of a Google principal engineer and architect for Android security has circulated widely since he posted it on his personal blog. In it he explains why he resigned: Google’s management, he writes, has abandoned its carbon-neutrality goals because of the energy demands of AI models, and has signed contracts with the US Department of War whose terms cover “any lawful purpose” — language he reads as incompatible with his own principles.

From Mountain View to a part-time advisory role

He joined Google in 2017 as Director of Android Platform Security, when Android had just passed two billion users and was, in his description, open source first. Before that he had studied the platform’s security from the outside since 2009, and he recalls how hard it was for external researchers to reach the internal teams. He also cites the company’s 2018 AI principles, which ruled out weapons and surveillance technologies, and the cancellation of a Pentagon contract after employees objected. In 2019, after moving his family back to Austria, he switched to part-time work and later moved from the director track to an individual-contributor role; the note itself was written from a principal engineer position, as his later addenda stress.

What he counts as the work

The achievements he lists are technical and public: making full-device encryption the Android 10 default even on the cheapest hardware, shipping end-to-end encrypted Android backup in 2018, insider attack resistance, ARM memory tagging, and privacy-first digital credentials. His team’s stated goal was to build systems secure enough that Google itself could not break them — protection that, he notes, was occasionally aimed at parts of Google. Management decisions on the Department of War deal, he writes, were neither debated nor communicated internally, and his ethics leave him no way to support offensive military work, particularly as a European academic.

Timeline and what follows

His contract carries a three-month notice period, so he remains reachable through internal channels until 31 August 2026 while handing over ongoing projects, and he says he has immediately disconnected from any AI work that could fall under the defence agreement. Afterwards he intends to continue on end-to-end encrypted communication and storage protocols, privacy-preserving digital identity, embedded systems security and supply-chain security. In two addenda he clarified that he was no longer in a director role at the time of resigning, that he still regards Android as the best trade-off among mobile operating systems, and that the note reflects no criticism of the colleagues who remain.