I wasn't exactly going for "DJI is great" - it's kind of funny that's how it came off.
My points were:
* DJI's use of Secneo on Android isn't hiding a "sendAllYourPhotosToTheCCPServerNow" function. This seems obvious but I've seen this take everywhere.
* However, DJI's apps are loaded with telemetry that's indistinguishable from malware. They ARE full of shady things.
* I wouldn't run a DJI app on my own phone.
* I would use a standalone DJI remote for most low to medium assurance applications, because while the shadiness remains in many ways, the threat model is easy to understand and boundaries are pretty easy to draw.
My points were:
* DJI's use of Secneo on Android isn't hiding a "sendAllYourPhotosToTheCCPServerNow" function. This seems obvious but I've seen this take everywhere.
* However, DJI's apps are loaded with telemetry that's indistinguishable from malware. They ARE full of shady things.
* I wouldn't run a DJI app on my own phone.
* I would use a standalone DJI remote for most low to medium assurance applications, because while the shadiness remains in many ways, the threat model is easy to understand and boundaries are pretty easy to draw.