Depending on what your goals are, I'd recommend going down the route I chose: run AOSP. Tagged releases of AOSP are the same base code that all the retail dist

Depending on what your goals are, I'd recommend going down the route I chose: run AOSP. Tagged releases of AOSP are the same base code that all the retail distributions of Android are based on, so should be just as safe. If you have a Pixel device, the RattlesnakeOS project [0] will allow you to run your own automated AOSP distro, complete with OTAs, on AWS. It also supports adding a few modifications like MicroG. All but the most recent Pixel devices are also supported by GrapheneOS, which is a security-focused ROM. Both of these projects support signed builds, so once you flash them to your device, you can lock the bootloader. [0]: https://github.com/dan-v/rattlesnakeos-stack https://github.com/dan-v/rattlesnakeos-stack [1]: https://grapheneos.org/ https://grapheneos.org/