From my testing, Waydroid appears to be very buggy and not fully compatible with the default Kicksecure at the moment. For example:
Kicksecure uses xfce 4.18, which still doesn’t support Wayland by default.
Installing KDE, which supports Wayland, will cause the sdwdate-gui systray not to appear because it doesn’t support Wayland (there’s a ticket already open for this).
Waydroid has blocking issues when running on Debian, even if iptables is installed:
They say it’s based on Debian bookworm, which is stable, but actually, if you install the OS, the repos are sid, not bookworm. A ticket has been created:
I have, in the past, gotten Waydroid to run under an X11 session with the help of Weston (running in windowed mode). It’s finicky and fiddly, but it works for the most part.
Emulators like genymotion (sadly not open source) should offers better isolation from the host system than Waydroid . Better performance and malware protection .
Waydroid shares the host Linux kernel, which presents a higher potential security risk if the container is compromised.
Unfortunately, no open source emulator exists yet.
I would vote for Android on VM to protect host system from malicious apks even no solution is entirely foolproof