And having security focused settings by default. For instance, the https://localmess.github.io https://localmess.github.io tracking attempt was prevented on Van

And having security focused settings by default. For instance, the https://localmess.github.io https://localmess.github.io tracking attempt was prevented on Vanadium (a browser maintained by GOS). Another serious vulnerability from top of my mind was TapTrap (https://taptrap.click/ https://taptrap.click/), which was fixed by GOS [1] few months ago. Android is still vulnerable to it! [1] - https://grapheneos.org/releases#2025070700:~:text=only%20permit%20third%20party%20apps%20to%20use%20custom%20activity%20animations%20for%20transitions%20between%20their%20own%20activities%20to%20prevent%20a%20recently%20disclosed%20Android%20tapjacking%20vulnerability%20branded%20as%20TapTrap https://grapheneos.org/releases#2025070700:~:text=only%20per...