That article may be overstating the danger somewhat, it will depend on the way the ROM chooses to implement it certainly but none of them give the permission au

That article may be overstating the danger somewhat, it will depend on the way the ROM chooses to implement it certainly but none of them give the permission automatically, some require you to enable it deep in the advanced app settings and some only enable it for system-level privileged apps (and if you can't trust those, then what can you trust?). See for instance LineageOS for MicroG's claims: >The signature spoofing could be an unsafe feature only if the user blindly gives any permission to any app, as this permission can't be obtained automatically by the apps. Moreover, to further strengthen the security of our ROM, we modified the signature spoofing permission so that only system privileged apps can obtain it, and no security threat is posed to our users. https://lineage.microg.org/#faq7 https://lineage.microg.org/#faq7