Let me write a list of requirements that only a specific phone can fulfill and call that “secure”.

GrapheneOS devs probably.

Like:

At least 5 years of updates from launch for phones (Pixels now have 7) and 7 years for tablets

Why? The image is based on AOSP. Are they going to reverse engineer the releases of other vendors and incorporate whatever fixes are in there?

Complete monthly Android Security Bulletin patches without any regular delays longer than a week

Same as above. It’s like like red hat releasing a security bulletin but a Debian based project has to be up to date with that bulletin. Makes no sense - unless you aim to build upon red hat enterprise Linux (which you won’t).

Inline disk encryption acceleration with wrapped key support

Optimisations are part of the requirement? Come on.

Support for A/B updates of both the firmware and OS images with automatic rollback if the initial boot fails one or more times

How is this not a nice to have?

Seriously, basically what they’re doing is grabbing the newest pixel and setting that as the baseline regardless of whether other phones do things better or worse.

[Anti Commercial-AI license](https://creativecommons.org/licenses/by-nc-sa/4.0/