Major checks:
build type (userdebug, user, eng)
signing keys
SELinux availability and mode
debugging-related properties
Bluetooth configuration
USB/ADB configuration
3G/telephony availability
enabled network interfaces
listening TCP services
ADB authentication
SUID binaries
AIDL services
disk encryption (FDE/FBE) availability
dm-verity availability and mode