/e/OS is not fully degoogled, as DNS connectivity checks, hardware attestation provisioning, and eSIM activation all go through Google.

It is often many weeks or months behind on security updates, especially in the WebView, which makes it easy to exploit.

It doesn’t support bootloader locking on many devices, and if you lock the bootloader on a phone that does support it, it could brick if /e/OS is on an older security patch than the stock ROM was.

It doesn’t use a lot of the hardening in GrapheneOS such as hardened_malloc which prevents memory corruption exploits, even if the hardware supports it.

And finally, /e/OS’s text-to-speech sends what you say to OpenAI, despite local options being available.

If you want a properly secure Android phone, the best option is GrapheneOS, however it only supports Pixel phones and future Motarola phones due to its high security requirements.

If you can’t get a Pixel then iOS in lockdown mode is the next best option, however if you can’t replace your phone, LineageOS is much worse than Graphene although it is still much better than /e/.

  • FG_3479@lemmy.worldOP
    link
    fedilink
    arrow-up
    2
    arrow-down
    2
    ·
    edit-2
    2 hours ago

    The reason I wrote my post is because there are better alternatives, like Graphene if you have a Pixel and can accept sandboxed Play services, or LineageOS which is less secure but works on many more phones and supports MicroG.

    /e/ is very insecure compared to those, and it is likely easy for someone who has bought a used Cellebrite to get into it and make your lockscreen useless.