[m4rtink]

Well, isn't the idea that you use apps compiled from source by distro maintainers, which are separate from the upstream maintainers ?

Frankly, I still trust this model much more than black box Android apps automatically updating in the background, sending tons of telemetry and demanding random permissions so they can spy on you.

Not to mention the security model preventing many useful things from working properly (try to get a SFTP working on an Android system so that you can copy out photos taken by the phones camera.

[hollerith]

>isn't the idea that you use apps compiled from source by distro maintainers

That might work if the main danger was upstream maintainers with bad intentions. But the main danger is security holes that no upstream or distro maintainer knows about, which allow attacks by parties that are not open-source maintainers.

Big picture is that GrapheneOS is much, much more secure than PostmarketOS.

[palata]

> Frankly, I still trust this model much more than black box Android apps automatically updating in the background, sending tons of telemetry and demanding random permissions so they can spy on you.

You're comparing a security model to... apps? I don't see how that makes sense.

Apps you install on Linux can do more than apps you install on Android, period. That's part of the security model.

Of course I like that I am an admin on my computer, but I don't need that on my phone. And one can enable root on Android and still keep the apps sandboxed...