A little rant about that, sorry in advance:
The Graphene team seems very busy trash talking /e/OS and Fairphone on social media (at least Mastodon) for not being secure enough.
Their criticism boils down to how nothing except GrapheneOS on a Pixel phone can ever be "secure enough", but they are weirdly aggressive and insistant about it targetting /e/ specifically.
I used to care when I saw their posts as of course I want my phone to be reasonably safe, but the more I looked at it the more it boled down to bullshit.
Furthermore:
- They insist one should buy a Pixel phone produced by Google - avoiding Google is my #1 priority from the start. Clearly my values don't overlap with theirs
- They pretend like /e/ is super dangerous because non-0-day exploits can get patched later. Yet /e/ provides software updates for much longer, while in the past all my phones that didn't break right away have immediately stopped receiving updates. Longer software support = more security.
- Contained apps is not so important if you don't install random bullshit on your phone. I get as much as possible from f-droid, which is very well screened.
- The communication of the GrapheneOS team around this has been pathetic to the point where I have frankly lost trust in the project. I struggle to trust a team I don't respect. /e/OS was started by the founder of Mandrake Linux, and as far as I've seen he seems to have values that align with mine.
- I like /e/OS. It lets me avoid companies like Google, block trackers, and just use my phone free of things I hate and cannot control or understand. For me, that is security.