I will always prefer "trust the developers" Linux model to "trust the manufacturers" that you have on mobile. Sandboxing just puts the problem one level higher

I will always prefer "trust the developers" Linux model to "trust the manufacturers" that you have on mobile. Sandboxing just puts the problem one level higher and doesn't remove it. Then on the subject of the xz backdoor, nothing is safe from that kind of attack.