when running an Android app in Waydroid, what data can it see? Can it read my local hard drive? Can it scan my network? Can I manage it to just live in it's container and get nothing but an internet connection?
Waydroid run a rootful LXC container and removes disables much of Android's security (for example SELinux). With a container escape, an attack could trivially gain root on the host.