> Do the official LineageOS releases have Verified Boot (allow you to lock the bootloader)? Possible in theory, but complicated: https://source.android.com/se

> Do the official LineageOS releases have Verified Boot (allow you to lock the bootloader)? Possible in theory, but complicated: https://source.android.com/security/verifiedboot/device-state#user-settable-root-of-trust https://source.android.com/security/verifiedboot/device-stat... https://www.reddit.com/r/LineageOS/comments/i76xme/is_it_possible_to_run_los_with_a_locked_bootloader/g10dew0/ https://www.reddit.com/r/LineageOS/comments/i76xme/is_it_pos... These attacks require physical access to the device, and a rather sophisticated adversary. If the attacker has physical access to the device, they could plant a camera to get the passwords or use a $5 wrench, etc. https://xkcd.com/538/ https://xkcd.com/538/ At that security level, you can't trust a single device, and you'll probably need to look at security solutions such as hardware security keys (Yubikeys), Shamir's Secret Sharing, plausibly deniable encryption, etc.