Running the fairphone 6 on CalyxOS.

Good seamless install and updates, supported a company looking to be just a bit more sustainable, didn't have to support google, got similar protections against corporations that geaphene does, just not the physical protections against state actors which isn't really in my threat model.

Repair ability does not compromise the security for all but the tiniest subset of specific targets. Full stop.

Sorry, but anyone making this argument is insane. You would have to be a top level state agent or corporate target for this to matter, in which case you would have dedicated security teams anyway.

Anyone stealing your phone not specifically targeting you or your information will wipe your phone to resell it and repairability will not matter.

Anyone after your data generally will use software attacks, phishing, etc... Repairability has no effect.

Anyone stealing your phone specifically to target your data for physical extraction, absolutely has a simple heat gun and ifixit 20€ repair kit if they have the capability to physically extract keys to break your encryption. If they do a bit of damage to the phone case or screen in the process, they don't give a shit, they are in.

The only argument that could be made is specifically timed attack with a dedicated person or team where they steal your phone, disassemble it, hack it, plant malware, reassemble it (and somehow not have the tools to reassemble it in the same condition), and deliver it back to the same location, all without you noticing that it was ever missing. That is a subset of the 0.1% of people that would be targets for the above attack. This is the world leaders, musk/bezos/lizards, heads of dissent organizations, etc...

Also, why would they do this and not just pay an Israeli hacking company to place a targeted malware ad to instantly install spyware? Much cheaper, more effective, and repeatable for months or years until it breaks in.