This is an idealism vs realism fight. You're both right in that you're both fighting for the end user to have ultimate control of their device.
However, there's a major caveat here. Google's play protect prevents me from using some apps on my phone running graphene. My banking app is one of them. Yes I know there's technical workarounds. Yes I know they have a website (for now). But the point is, this is the direction stuff is moving. Fully signed devices from power-on through the entire stack and a flag that warns software if that breaks. Yes, it's a win for security. But I have zero control. Google has all the keys to all the doors and graphene can't do anything about it. Nor can I. And Google has very little incentive to change this.
I fear this is the direction things are moving to. Phones will be tied to our identity. Web will be depreciated as a security risk. Only one of the two options you two are fighting over fixes this: power must be taken from these mega corporations.
However, there's a major caveat here. Google's play protect prevents me from using some apps on my phone running graphene. My banking app is one of them. Yes I know there's technical workarounds. Yes I know they have a website (for now). But the point is, this is the direction stuff is moving. Fully signed devices from power-on through the entire stack and a flag that warns software if that breaks. Yes, it's a win for security. But I have zero control. Google has all the keys to all the doors and graphene can't do anything about it. Nor can I. And Google has very little incentive to change this.
I fear this is the direction things are moving to. Phones will be tied to our identity. Web will be depreciated as a security risk. Only one of the two options you two are fighting over fixes this: power must be taken from these mega corporations.