Critical bypass bug: Protected devices can be uninstalled without admin permission. Repro: Go to Android Notification History > tap Google Play Protect Service > security & privacy> disable Canopy’s Accessibility permission. Next, go to VPN settings and choose "Forget VPN". There is a brief gap before Canopy enforces the VPN again. During this delay, open Settings > Apps > Canopy Shield and tap Uninstall. The app uninstalls with no block. Needs Device Owner API / DISALLOW_UNINSTALL_APPS to fix.