The obvious question is: how is it running on Android? Purely as an Android middleware, thus allowing more clever hacks through?

It doesn’t run currently on Android and BattleEye doesn’t work on iOS either they don’t bother with anti cheat on mobile you just do root / jailbreak detection as you can’t really cheat without them as you need to hook into the memory and the network stack.