[AT&T, Rogers HTC One X, Telstra One XL] jcase:
To throw in another reason, that I seemed to have left out before, one reason for obfuscating exploits. Android malware in the past has used exploits. The malware authors for Android very rarely (I can't find an example that I can share) create their own exploits, but compile from open source ones. See Droid Dream http://www.androidpolice.com/2011/0...your-phone-steal-your-data-and-open-backdoor/ (Old example but first one that comes to mind). Because WeakSauce can gain root from a regular application, with minimal permissions, it has a very high risk for abuse. It isn't like TacoRoot or BurritoRoot where they requires direct user interaction to gain root.

While I do contribute to open source (see that OS running on your phone, I've contributed to it), not everything I produce is open source. Most of what I produce is never publicly seen, let alone open sourced.

Calling back home is a normal thing in this age, especially with licensing. The reason it was not the norm 20 years ago when us geezers of the internet first hopped on is because few had reliable always on internet. From commercial, to freeware, to open source calling back home is normal and accepted. The OS on your phone does it, the radio on your phone probably does it, the OS on your PC probably does it, your TV might do it, even refrigerators and stoves do it now a days, my thermostat does it, my lights do it (Hue), Xbox, PS4, Wii etc etc Could go on for days. Some cars even do it.

1 - I do make honest money, I work full time in mobile security.

2 - You seem not to know much about me, which is understandable because who am I? Some random person online. I say everything out loud, sometimes with a foot in my mouth but I say it out loud. I write commercial software, from silly apps, to "tools" (exploits) used in the occasional forensic software, to security patches to fix vulnerabilities. I don't have to "come out" as it is a known fact, I don't hide my intentions. I also don't pose as a contributor/dogooder/world benefactor, I am quite clear if I release something. If you see me release an exploit, understand that it is is utterly for my own amusement. I frankly don't care if anyone has root access. You will hear my say time and time again "If you want root, buy an unlocked device." <- Best advice on XDA.

I'm not sure if you are new to open source, or stretching an argument. I don't have to make this argument, I can just point you to something like http://www.gsmcocktail.com/ that rips off commercial, freeware, opensource, closed source a like. GPL/LGPL/any license has no real power in many parts of the world. A relevant blog post by someone infinitely better at this than I, http://vulnfactory.org/blog/2012/02/18/xoom-fe-stupid-bugs-and-more-plagiarism/.

People are stupid and will take whatever "looks the prettiest" over the real thing, this comes from experience in this community and not from typing in words into google.

Actually, I actively encourage the "noobs" to get into mobile security. You will not find a single person who has open sourced more mobile exploits than myself, if you had taken a minute and looked you would have seen this. I'm also working with a well known publisher to publish a book (woohoo contract signed, chapters being written!) on reverse engineering Android, since no reliable concentrated resource currently exists. I'm much nicer and willing to help the noob who asks nicely, than the programmer with likely more experience than myself who doesn't take the time to research before commenting.

I'm not 20 anymore either, I wish I was as life was easier then. More likely I'm nearer to your age than to 20.

I do do it, while having a wife, two young kids and two teenagers. I do it mostly for a living, and occasionally for my own amusement.