alt Hacker NewsYour point is valid for every flavor of Android except GrapheneOS.
GrapheneOS’ security model makes that of desktop Linux look like a joke.
This is an objective analysis based on x86 security, GrapheneOS hardening (including isolation and hardened mem allocator), Pixel hardware security.
Replies
grapheneos • yesterday at 11:30 PM
AOSP on a Pixel without the improvements made by GrapheneOS is far more private and secure than desktop Linux. The starting point is far more secure than the hardware, firmware and software of the desktop ecosystem. It has a far better privacy model too. GrapheneOS does heavily improve the permission model, exploit protections and much more but the starting point was already much better.
Even AOSP has selinux enabled by default with very comprehensive and scoped policies. That, along with app isolation and permission system, already leaves desktop Linux far, far in the dust on security.