Sure, the OS is closed source and so is the review process, you kinda have to trust them to actually do what they promise. For everyday normal life stuff, it's likely safe enough though. Obviously, if you're a spy or a whistleblower operating in some high stakes scenarios, you'll probably want something else, but you also probably don't want Android unless it's been seriously hardened (i.e. something like Graphene).