OK, but Google will happily confirm android device running Oreo is safe.

While it's dramatically worse than devices Google refuses to certify (ie these not running their spyware as privileged services).