If this is an acceptable solution, just run a modern uncertified Android instead.