The company says it hardened the security of its new flagship phonesand plans to release a built-in Android VPN.