Android has (as standard) stuff like sandboxing, SELinux, verified boot, FDE, etc. It’s possible to get stuff like this working on normal Linux, but it’s a lot of work (more for some things than others). Also the standard Linux solutions for e.g. sandboxing are just not as robust as what’s provided by Android.