@campuscodi

A *one-time* delay when you seek to turn off the protection that stops the user from side-loading apps.

To be honest, given how many security-blind people use Android now, I can live with this.

Time was when Android users were all "power users", like Linux used to be. Those days are long gone.

A bigger issue is Google closing Android off from side-loading apps at all.

@campuscodi Alt text: Machine-generated, human-verified:

An infographic titled "Advanced flow for power users to sideload apps from unverified developers" (with "sideload apps from unverified developers" in green text). It presents a four-step process, each step numbered in a green circle with a corresponding UI mockup and explanatory text below.
Step 1: "Confirm you aren't being coached"— Shows a dialog with two buttons: "Yes, someone is guiding me" and "No one is instructing me," plus a "Cancel" link. Below, the explanation reads: "This is a quick check to make sure that no one is coaching you into turning off your security. While power users know how to vet apps, scammers often pressure victims into disabling protections."
Step 2: "Restart your phone and reauthenticate" — Shows a dialog titled "Security delay required" with the text "Because this setting reduces your device's security, a delay is required to continue" and a button reading "Restart your device now to begin the security delay," plus a "Cancel" link. Below: "This cuts off any remote access or active phone calls a scammer might be using to watch what you're doing."
Step 3: "Come back after the 24-hour wait and verify" (with "24-hour wait" in green) — Shows a dialog titled "Security delay complete" with the text "You can now continue to change this setting," a green "Continue" button, and a "Cancel" link. Below: "There is a one-time, one-day wait and then you can confirm that this is really you who's making this change on your device via a biometric authentication (fingerprint or face unlock) or device PIN. Scammers rely on manufactured urgency, so this breaks their spell and gives you time to think."
Step 4: "Enable the settings and you're ready to install apps" (with "Enable the settings" in green) — Shows a settings screen with two radio options: "Turn on temporarily" ("Installing unregistered apps will be allowed for 7 days") and "Turn on indefinitely" ("Installing unregistered apps will be allowed indefinitely. Not recommended."), plus a "Confirmation" checkbox reading "I understand and accept the risks from unregistered apps, and wish to proceed." Below: "Once you confirm you understand the risks, you're all set to install unverified apps indefinitely. You'll still see a warning for safety, but you can just tap 'Install Anyway.'"

@[email protected] Thats why i flashed LineageOS.
Fully de googled my setup.

Theres 4 ways to handle this news.
1. nuke google, literally.
2. de google your life entirely and figure out the rest.
3. infiltrate your countrys politics, somehow, and work to push from within
4. cry about it loudly on the internet with other people who are also crying loudly about it on the internet

@campuscodi
Hey #google : *Your* threat model is not *my" threat model. Anything like this needs to be configurable by the owner or MDM. Allow shorter, longer, or disabled.

Is there even any evidence that delaying 24 hours changes the outcome?

@campuscodi

Well. I am switching to postmarket as a daily driver.

@[email protected] friend. Are there any devices that work well as a daily driver?
Also do you know of anyone who got safetynet attestation working on waydroid?