Custom android ROMs
CalyxOS
see ./calyxos.md
GrapheneOS
- Device-support
- Older models not supported as much as with CalyxOS
- Also uses Verified Boot (including bootloader re-locking)
- Probably the best security hardening option
- Very fast security updates (~1-2 days after release by Google)
- Lots of drama about lead maintainer, who stepped down as tech lead 2024-04
- Google services sandbox not always reliable
LineageOS
See lineage.md