c) It doesn't matter whether it runs unmodified AOSP if supply chain attacks are a thing at both a hardware and firmware level. https://www.hackster.io/news/re

c) It doesn't matter whether it runs unmodified AOSP if supply chain attacks are a thing at both a hardware and firmware level. https://www.hackster.io/news/researchers-spot-silicon-level-hardware-trojans-in-chips-release-their-algorithm-for-all-to-try-ba00bbd56248 https://www.hackster.io/news/researchers-spot-silicon-level-... People like to worry about big organizations, govs and corporations, but these threats are implemented by single human beings and can be exploited by single human beings who know of them.