[beeboop]

If you really care about security from an organization like the NSA, the only option is either to have it be entirely air gapped or to be entirely open source, including BIOS and UEFI firmware and anything else that might run on the hardware. There are really no feasible options, and especially so in phones.

[rimantas]

It's amusing to see open source still promoted as panacea after all those OpenSSL exploits.

[ionised]

It's obviously not a panacaea, but it does have the quality of allowing audits by the community and by independent experts in the field.