XR and the metaverse have long been recognized as problematic in relation to cyber security and privacy. Most such environments use headsets that are powerful Android devices but come with their own security vulnerabilities. Can security and privacy innovations designed for Android mobile devices be used in XR too? The answer is yes and no. They certainly are a starting point for many in the sector, but XR poses unique challenges due to its highly integrated interaction of human and virtual world. For example, immersion should not be broken to re-authenticate all the time, resource consumption should be kept to a minimum or cyber sickness might be caused, location privacy extends to the actual physical surroundings too, and so on. In SUN, we take all these requirements into account to develop the first XR cyber monitoring toolkit that protects the user at all times without compromising resource efficiency, immersion or privacy.