Been using Graphene as my daily driver, great for those who know how. But your post didn't mention that, a naive reader might just use his old android with 300+ preinstalled trackers.
Also, even Graphene has emergency connectivity which can't be fully turned off, not sure I'd want to trust that when it comes to private keys.
Login to reply
Replies (1)
Of course you can do all of that and then have a makeshift "probably secure" signer for not very critical stuff. But the sheer amount of components in a smartphone will always be a blind spot imo.
Building your own dedicated signer from general purpose hardware used with peer reviewed, and proven open-source software will always be a superior approach, just less convenient.