@ygor genuinely surprising to see degoogled android up here, ya'll are living in an echo chamber I'm sorry

@ygor your random phone running lineageOS with an unlocked bootloader is free pickings if someone steals it (trivial to wipe since the bootloader is unlocked!) and makes you very vulnerable to an evil maid attack.

grapheneOS is fine because they actually relock the bootloader, arguably these should be separate categories in the poll.

@penguin42 @ygor android lets you enrol custom signing keys, like efi signing keys more or less

most vendors don't implement it properly and you can easily brick your device though

@cas @ygor Oh, ok - that's nice - and vendors screwing it up is hardly surprising :-)