Mullvad handles payment data in a much, much better way.

how is it way less convenient? I switched from Proton to other services and I conveniency has increased since quality of services has increased. and because I don’t really see many fundamental benefits of them being tied together.

isn’t this just asking your age when the OS is installed? in that case can’t they just install any non-hacked distro and lie? there’s no verification, is there?

the software is open source. we can verify it doesn’t do anything bad. the server is what you cannot trust.

The envelopes in the closet thing is that he could just buy a ton of them at once so he doesn’t need to walk to get them one hundred times. That would be the most efficient option. But it’s also the most boring.

Worst case scenario where Google makes it extremely difficult going forward, what is the hard part about just never rebasing onto future work from Google?

From what I’ve seen there hasn’t been significant core work on Android for a long time. It’s been mostly changing from rounded corners to square corners to rounded corners, or shoving AI into every nook and cranny.

I’d think a small dev team like Graphene could maintain their AOSP fork moving forward.

IDK, I’d think the best path forward would be to just fork Android and move on from there. That’s what Graphene OS already does. Just standardize on Graphene OS for everything and get them more devs / resources.

Would Mullvad even legally need to comply with UK laws if they don’t have a server in the UK? Maybe they could allow UK user but just not operate out of UK?

Why do banks need a hardware attestation, out of curiosity? I’d assume that banking apps are just clients so all that matters is if they have creds or not.