We were talking about having apps installed, not physical access to the device. That’s a huge difference.
The argument still falls apart even if you do move the goalposts to physical access.
If an attacker gets the device, they will need you to not be able to trigger a lockdown/wipe as they pry it out of your hands. If you can’t do that, they will still need your encryption key. Hopefully the device is locked with a strong passcode, and not your face/fingerprint/4-digit birthday. It would be pretty silly for someone to be running GrapheneOS and not do that.
If all those safeguards fail, you’re either very stupid or incredibly unlucky. Regardless, it’s much easier with GrapheneOS than with stock Android to ensure the device becomes worthless in a physical access scenario.
We were talking about having apps installed, not physical access to the device. That’s a huge difference.
The argument still falls apart even if you do move the goalposts to physical access.
If an attacker gets the device, they will need you to not be able to trigger a lockdown/wipe as they pry it out of your hands. If you can’t do that, they will still need your encryption key. Hopefully the device is locked with a strong passcode, and not your face/fingerprint/4-digit birthday. It would be pretty silly for someone to be running GrapheneOS and not do that.
If all those safeguards fail, you’re either very stupid or incredibly unlucky. Regardless, it’s much easier with GrapheneOS than with stock Android to ensure the device becomes worthless in a physical access scenario.