[jdkfree]

If you can get transit to release data in a standard protocol, then I think that'd be fine. I would just be afraid of closed devices needing access to closed protocols and APIs. There be dragons.

Maybe something like nixOS where the phone's state is the result of a pure derivation. No installing or configuring anything except through a privileged ssh after decryption. Then boot and go again.

Only automatically updating is possible from the device proper, rollback on failure.

[astrange]

> If you can get transit to release data in a standard protocol, then I think that'd be fine.

They do; it's called GTFS. It tends to need a lot of cleaning and manual in-person verification, which is expensive.