> The bootloader being locked down isn't malicious considering it lets the system prove that malware hasn't compromised the boot process. It's actually the opp

> The bootloader being locked down isn't malicious considering it lets the system prove that malware hasn't compromised the boot process. It's actually the opposite - it lets the system prove that the unwanted spyware by Google has compromised it. > If a normal person buys a ACME brand phone, but a malicious actor unlocked the bootloader and installed malware into the OS, that user will never realize they were pwned until they encounter software that is a step ahead in the cat and mouse game and the malware isn't able to hide its existence. Well this just shows how far has Google gone with its bundled spyware. People use unlocked devices because even being less secure is better than not being in control and having spyware installed on your phone... > A user having root is also problematic because it compromises Androids security model. > If a banking app saves an access taken to your phone it is relying on the security of Android that no one is able to steal this taken. If the a user is able to get root they could bypass this and steal the token and commit fraud. Oh what a beautiful example. Since my bank allows me to use the website and me being able to see all their cookies is not a problem for me, I think this example is kinda impractical. But worry not - I have a different example: If an adware vendor called Google bundles its spyware into your phone they rely on the security of Android that the user is not able to uninstall this crap. If the a user is able to get root they could uninstall this and then Google would be unhappy.