I'm assuming GrapheneOS isn't backdoored. If a new release were backdoored, I would have a non-zero chance to catch it while reviewing commit diffs, but the chance of catching it would be zero if I instead used auto-update and let the devs push whatever signed binary they wanted.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments