



couldn’t one manage without OS updates - relying on only proper cyber hygiene and opsec - until a more viable solution comes up?
That’s been my plan. I just replaced all my android devices with new (to me) devices which are all unlocked, flashed/degoogled and rooted.
I should be good for 5+ years. Hopefully by then the community has come up with a solution to whatever bullshit google has done.


But that begs the same question. If you never update your existing phone with google’s malware, you should be ok.
Obviously if you buy a new phone that’s already infected you’re screwed unless you can flash a new ROM on there.
My point is. People’s current phones do not have this malware on it yet. If you disable updates and/or degoogle, your device should continue to work as is. Perhaps without being able to use Google Play Store, but honestly that’s not huge loss for anyone that cares about this stuff in the first place.
FYI: Signal stores all of your messages on your device. If something happens to them there, they’re gone. I’m not saying that justifies an update nuking your messages. Just explaining for anyone who may not understand that. There’s no central database storing your data long term. Which is a feature.


Try FairEmail. It’s the closest thing I’ve found.
Everyone should be degoogling their devices before malware gets installed by an update. Get rid of windows while you’re at it. This may take time, so start now.