Google is rolling out intrusion logging on Android 16, giving users an encrypted way to see what happened if their device is compromised.