Very true 👍

Agree. In fact, even projects that do have ties to those regions. Free & open-source is a stance.

Its the Chilling Effect. Fear of breaking a law (even if that law ends up not being applicable to you) is enough to scare people into complying with it. I've seen companies worry about GDPR that have no presence in the EU. Yes, the EU could still fine them, but they wouldn't have to actually pay or even acknowledge it.

Outside of buying a supported Pixel device and flashing it yourself? Not that I'm aware of.

I was wondering the same. I have an extremely old Android that's dying, and as soon as it does I'll look for devices with that can run GrapheneOS. As @Unreliable@lemmy.ml says, it seems Pixel is the only one for now, and possibly one needs a slightly older model as well. That's what I'll look for.

i personally think people who maintain distros outside of these countries/regions will just ignore these requirements

Are the devs even in a jurisdiction where that matters? Given they're working on a project specifically focused on privacy and security, even if they are in such a jurisdiction, are they actually traceable, or have they been obfuscating their identity with tools like Tor? It might not be enforceable.

Hopefully, what 4chan did.

https://www.bbc.com/news/articles/c624330lg1ko

Just checked, Graphene is a registered non-profit in Canada.

It'd lilely be to OEM selling the phones in the state, since GrapheneOS is run in a country with different laws.

👍

Agreed, although having it in writing may end up backfiring on the team being counterproductive because it will be used against them when the locations that have implemented such laws use it as evidence of why it should be banned.