I'd buy that. I'd go further and say a dumb phone that doesn't allow complex apps would be fine with me too. It has built in apps for a set of open protocols like the web, email, matrix/irc, vcard, ical etc. Updates these apps, but that's all you get. Pushing security on top of the Android ecosystem seems like a lost cause and building something with app ecosystem parity is a pipe dream it seems.