GrapheneOS has has many more feature that AOSP/LineageOS lack (https://grapheneos.org/features) and also 0 google connections unlike LineageOS (https://grapheneos.org/faq#default-connections)
>some of graphene's touted features are geared towards being able to use google's services
and they are 100% optional and opt-in by default
For example years ago I opened an issue around runtime-patching applications (https://github.com/GrapheneOS/os-issue-tracker/issues/284) and was told it didn't make sense in the OS.
Putting aside the validity of arguments on either side of that issue, runtime patching allows me to very quickly excise large swaths of anti-privacy code across every app on my phone.
If I was to switch to GrapheneOS I'd have to accept that I'd be giving up a fair amount of privacy for the added security.
How about GrapheneOS connections?
Zero or non-zero?
"By default, GrapheneOS only makes remote connections to GrapheneOS services and the network provided DNS resolvers. There aren't any analytics/telemetry in GrapheneOS. The only information revealed to the GrapheneOS servers are the generic device model (such as Pixel 7 Pro) and OS version which are necessary for obtaining updates. The default connections provide the OS and apps with updates, set the system clock, check each network connection for internet connectivity, download a global database (does not vary based on location) with predicted satellite locations when using Location and obtain attestation chain signing keys for the hardware keystore needed for the hardware-based attestation feature."
- Giving money to Google
- Using hardware that is ultimately controlled by Google
- Hardware replacement costs every time Google support runs out, instead of when the hardware stops working
- Ongoing environmental impact from replacing your hardware every time Google support runs out
It might make sense to accept those problems if your threat model can only be addressed by Graphene, but for the rest of us, something else might be a better (and more responsible) choice. At least for now.
I would love to see non-Google devices with the features that GrapheneOS requires.
I don't mind giving Google, or any other company, my money. Especially not in exchange for something like hardware. What I object to is giving Google (or any other entity) my data.
About software support, isn't that true for all devices and all manufacturers? Google guarantees 7 years of android updates and security patches, which is way better than most competitors, and Graphene adds in some years of extended support.
Not to mention that once all support is over, if you don't care about the fact that firmware, kernel and vendor code will never be updated, you can still switch to LineageOS, which still has nightly builds even for the first Pixel with extremely updated security patches.
The only valid point is that hardware is controlled by Google. There could be some sort of extremely-low-level backdoor or spyware, and we would never know. That's also true of each and every other CPU, modem or device with vendor-specific code.