[pgo]

The rooting process is actually very standardized. On most of the phones you just have to patch a su manager tool called Magisk[1]. Its open-source and been under a lot of eyes.Also the dev works at apple and is a community favorite.

Custom roms are a lot more risky, there are 100s of different flavors made by relatively unknown developers and even though they are technically open source, I find it highly unlikely that none of them contain malware. I mean you can introduce a memory corruption bug in few handful characters, these custom roms are practically unauditable.

1. https://github.com/topjohnwu/Magisk

[yjftsjthsd-h]

> Custom roms are a lot more risky, there are 100s of different flavors made by relatively unknown developers and even though they are technically open source, I find it highly unlikely that none of them contain malware. I mean you can introduce a memory corruption bug in less than few characters, these custom roms are practically unauditable.

Depending on your phone and threat model, it's not obvious that this is worse than the alternative. Given that there have been phone manufacturers that outright shipped malware, and most phones stop getting security patches after a few months and then steadily accrue CVEs, it may be better to chance a 3rd-party ROM.