The difference with Linux kernel is that it's way more complicated to persuade someone who just likes the idea of it to install it, so there's really no protection needed - if you're installing a custom kernel (or more likely, a whole OS using that kernel) you probably know enough not to end up downloading malware.
That's not so true about just providing "random" APKs.