Reply As is working for me, for custom domains I setup in tuta.

I think google play is a necessary thing for them to distribute in the sandboxed google play harm reduction feature they advertise.

Ascrescent is the open source self-signed app store they promote, that is fully open, and its in their app store as well - but has very limited apps (organic maps, molly, but not fdroid inside)… but Ascrescent does not require the apps distributed to be open source… so just like google play

The reason they don’t include F-Droid is they have a weird cultural bias against fdroid signing apps… they don’t really speak to the relatively new fdroid reproducible build chain where the apps are signed by developers, but built by fdroid… which is the far superior security solution (verify the developers built it, and verify the source used in the binary is the published source) that no other app store offers.

I agree it would make sense for the GOS app installer to include fdroid, its weird that they don’t, but their line is only developer signed builds… which, google play actually does do… google play apps are developer signed.

Thanks for the downvote! Really helps lemmy become a more welcoming place when we are just having a civil discussion.

Having google play, and the auora store in the GOS apps system does reduce friction to install them vs f-droid, agreed, but it is a blank slate and its totally up to you.

It does not route hotspot traffic over the VPN in my experience

It’s not installed.

Thank you for explaining your architecture. I understand now.

carrier detecting ttl and thus blocking hotspot traffic

There is a fix for that, sharing the VPN over the hotspot like in calyxos or lineageos.

By default there is nothing, it’s a blank slate. It’s up to you to decide what apps to use.

There is no bridge

Makes me feel like a sucker for buying earlier… Not great

If your objective is to punish Google, or to have nothing to do with Google. I completely agree with you using a pixel phone just doesn’t make any sense. You shouldn’t do it

If your objective is to have the most security possible… Then you should install graphene on a Pixel phone.

The graphene phone has the SIM card.

Now how does that phone share a VPN connection with the laptop? Or another phone that’s not graphene?

And my requirement for my scenario is, the upstream carrier cannot tell that the traffic is not coming from the graphene phone

I’m not sure I understand your architecture.

Let’s say I’m traveling. I have two phones and one laptop

One of the phones has a SIM, unlimited data for the phone, and no data available for tethering. The Sim phone has a VPN

In your use case, how do I get other phone, and the laptop to use the VPN?

How do you like the cross profile notifications? What’s your workflow? Do you have multiple profiles active at the same time?

https://www.privacyguides.org/en/android/distributions/#aosp-derivatives

https://eylenburg.github.io/android_comparison.htm

I am a GOS user, it just works, so I don’t really think about it. It’s very nice to have storage and contact scopes.

My only complaint is I can’t share a VPN over hotspot or tethering, which is very useful for a travel router device (to make all traffic look like it’s coming from the phone). (Lineage and calyxos have this)

Do you like being asked at every transaction to add more money?

If no, then don’t incentivize that behavior. Don’t reward them for behavior you don’t want to see everywhere.

There are mailbox services, you get a permanent address, they can email you your mail.

Banks are more sticky, they don’t just want a permanent address, they want your place of residence. If you’re always on the move, you can have an intended place of residence… They may not accept the commercial mailbox service addresses, and in that case most people use a friend or a relative as their official banking location, but use the mailbox service for all of the mail. I live here, but I get mail there. That works for most people

Just from a game theory perspective, a distributed group of people who are unorganized are unable to get their concerns addressed properly when it comes time to writing tax laws.

The rich and powerful, by virtue of being rich and powerful, have a voice in writing the tax laws. The distributed poor, do not. So it’s much easier to satisfy income goals by taxing the group who has no feedback loop to the politicians