Long story short: - Onyx still doesn't release kernel sources
- Onyx still uses outdated and vulnerable builds of Android, with questionable settings such as disabling SELinux
- Their devices are very chatty back to servers in the PRC.
- Their digitizer API is still hostile to developers.
- They shut down their support forums when the chorus of disgruntled customers began to get too loud
And even worse, they are using "anti-China movement" as an excuse to not comply with the GPL. This company is shit and no one should give them any money. And yet, all of these "review sites" (full of every kind of affiliate link imaginable) can't help themselves from riding the gravy train of free product from this company.
Edit: And then there are large threads like this [2] where people recognize all the problems and try to "secure" their devices. ( ´_ゝ`)
[0]: https://news.ycombinator.com/item?id=21041543
[1]: https://old.reddit.com/r/Onyx_Boox/comments/hsn7kx/onyx_usin...
[2]: https://www.mobileread.com/forums/showthread.php?s=64718a04c...