this post was submitted on 21 Jun 2025
40 points (88.5% liked)

Privacy

39084 readers
411 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

GrapheneOS vs LineageOS vs iodéOS

According to Comparison of Android-based Operating Systems, GrapheneOS seems to be better than LineageOS and iodéOS in every aspect.

I'm wondering if there is any downside of GrapheneOS. What am I giving up for using GrapheneOS instead of LineageOS and iodéOS (besides GrapheneOS only support pixel)?

In terms of privacy, security, customizability and functionality, which OS would you recommend and on what device would you recommend using it?

Answered questions

  • Does LineageOS supports muti profile like GrapheneOS (I thought all AOSP supports multiprofile feature)
  • Does LineageOS supports full device encryption using some open source app? (like veracrypt)
    • @https://lemmy.world/u/who@feddit.org Yes, full-device encryption is built in to Android these days.
  • Can LineageOS supports Sandboxed Google Play with some tweaks?
    • no

Some questions

  • If there is backdoor planted in pixel (which in my opinion is very likely), then I guess the “risk of an adversary gaining physical access to the phone” is quite equal for both of OS?
    • https://lemmy.world/u/upstroke4448@lemmy.dbzer0.com - It is highly unlikely there is a backdoor in the Pixel. It’s just not worth the risk for Google. Not only are the phones highly scrutinized by experts but Google has a million other legal ways to get info off your phone for 99% of users who use the stock OS.
  • @benjaminoakes https://lemmy.world/u/benjaminoakes (how do I @ another user in lemmy???) and I qoute "Graphene is likely to run into issues soon. They were relying on the AOSP source tree including Pixel-specific files. Google isn’t releasing those anymore, so GrapheneOS would have to reverse engineer or extract the needed files somehow."
    • should I be concerned about this issue? Will it affect my experience in the next 5 years ? (I usually update my device in 5 year cycle)

thanks a million

you are viewing a single comment's thread
view the rest of the comments
[–] upstroke4448@lemmy.dbzer0.com 12 points 1 day ago* (last edited 1 day ago) (2 children)

There really isn't much comparison.

Graphene only supports Pixels because it is the best phone for hardware security. If you choose to use a different phone you have already accepted a less secure device.

Sandboxed Google Play is going to offer the most compatibility as it allows you to access the main app store in the Android eco system without giving up privileged access to your phone. Devices that use Micro G or regular play store can't make that claim. Which is a massive privacy issue.

Since Graphene OS works with other launchers there really is not a difference in customizability.

I'd love to be able to say there is a good competitor for GOS but none of the other custom ROMs actually focus on Privacy/Security and most are dishonest about that fact. Divest OS was one of the few other ROMs that was honest about what it was so it was sad when the dev moved on.

I'd also note that threat model matters. Not everyone needs top notch security or privacy. There are good reasons to not use GOS, but better privacy/security isn't one. The obvious one is opportunity, whether it's regional or financial, Pixels can be a pain to get.

[–] skarn@discuss.tchncs.de 2 points 8 hours ago (1 children)

Claiming that literally installing Google Play, though sandboxed, gives massively better privacy than MicroG is a pretty wild claim.

[–] upstroke4448@lemmy.dbzer0.com 2 points 6 hours ago* (last edited 6 hours ago)

Not at all. Sandboxed google play is...sandboxed. Micro G has privelged access to your phone. That is a massive canyon in the difference of access you are giving an app.

Its the primary privacy reason why standard Google Play is such a privacy nightmare.

The only difference with Micro G is your shifting trust from Google to Micro G. Which is fine if that's what your threat model allows but it doesn't erase the issue.

[–] happeningtofry99158@lemmy.world 1 points 22 hours ago* (last edited 22 hours ago) (1 children)

ManyThanks!

I still have a few questions:

  • Does LineageOS supports muti profile like GrapheneOS (I thought all AOSP supports multiprofile feature)
  • Can LineageOS supports Sandboxed Google Play with some tweaks?
  • Does LineageOS supports full device encryption using some open source app? (like veracrypt on windows)
  • If there is backdoor planted in pixel (which in my opinion is very likely), then I guess the "risk of an adversary gaining physical access to the phone" is quite equal for both of OS?
[–] upstroke4448@lemmy.dbzer0.com 1 points 19 hours ago (1 children)

I'll answer what I know.

LineageOS doesn't have anything like sandboxed Google Play. That is a flagship feature of GOS.

It is highly unlikely there is a backdoor in the Pixel. It's just not worth the risk for Google. Not only are the phones highly scrutinized by experts but Google has a million other legal ways to get info off your phone for 99% of users who use the stock OS.