"You dont need suspicious flashing tools or malicious leaked OS versions"
What is a malicious leaked OS?
Besides how would a "malicious OS" be specific to Android? Someone could do the same thing with webOS.
Or a jailbroken iPhone for that matter...