use PIE (full ASLR) by default on Android too

Android no longer permits non-PIE executables.

Closes #17437