I have a Pixel 6 with GrapheneOS but all opinions are welcome.
My choices:
1° Disable screenshot feature 2° Desktop mode
-
Education regarding advertising ID and its deletion presented during setup (consent).
-
Addition of internet permission on per-app basis. Just like notifications now, every new downloaded app must get your permission to use the internet, else work in offline mode.
-
Give permission to only selected media to apps rather than everything. This is such a security risk, one bad app and it can steal whatnot.
2 and 3 are already supported in GrapheneOS.
Im pretty sure this feature is from the upstream lineageOS, for those without a pixel
I know. I was going to buy a Pixel 7 for it but the G2 processor runs pretty inefficiently thanks to Samsung’s 4nm process, as compared to something like the 8+ Gen 1. It’s pretty weak in comparison as well. So I ended up getting a Nothing Phone 2 and manually degoogled it, swapped everything with their open source counterparts. Not full proof I know, but my threat model is escaping big tech surveillance and living an ad-free life which is more or less getting satisfied xD
-
Installing apps without having to deal with Google or shady app stores.
Aurora store (google-dependant but at least it’s anonymous) and f-droid exist
You can install apps without Google Play the problem is that Google services has a lot of privileges in the system and many useful apps relies on Google Play services to work.
Your 2 features are good choices.
Some developers have added the “disable screenshots” feature (Privacy Browser, for example) activated by default.
I think desktop mode is all about the hardware. My phone can do it, and my partner’s more powerful phone cannot. I’m probably wrong though.
I think all phones should have hardware switches to kill camera, WiFi, etc.
iirc the librem 5 has hardware switches, which are such a comforting feature to have
It does
Multifactor unlock. (Fingerprint+ pin)
Different cold boot passphrase.
Hardware token support for unlock or boot (yubikey, etc)
Each user should be able to have a work profile.
Work profiles shouldn’t be special, why not unlimited profiles per user.
Disable / freeze any app (not just pause notifications). If I have a game I like to play on airplane flights, I can have it frozen all the other time.
Prefer wifi mode, go into airplane mode, turn off cellular radio when attached to good wifi.
Better customization of the share screen, I don’t fucking need or want apps to put my contacts I to the share bar. Google loves to rotate contacts into my share bar. This needs to be a optional feature, because it leaks who you are communicating with outside of the app
When using multiple users allow for notifications to be shared to the active user.
