They just chuckle to themselves and think: “These idiots have forgotten about things like SS7 and mobile networks in general… or triangulation… and that methods like UXDT still exist.” The safe way to handle any Android device is to assume it’s compromised from the start and not trust it at all—everything else is just a smokescreen. Why do you think cryptophones are being taken off the market, but pure software solutions are still allowed... What about the hardware... undocumented instruction sets, etc., etc. You can’t trust either the software or the hardware... Oh yeah, the devs say everything’s fine... but users completely forget about possibilities like NDAs...

I'm gonna sound like a shill, but your claim that "Calyx will literally save lives from ICE" is crazy.

After abandoning their users by pausing all updates, and given that a third of their supported devices are Google Pixels, any one with a Google Pixel is significantly better off on GrapheneOS.

ICE has shown their hand in what they're willing to waste tax payer money on, so one must assume they have access to Graykey / Cellebrite, and Calyx does very little to prevent physical attacks. Even on the digital side, Calyx does nothing to increase app security and the device sandbox, and given ICE's partnership with Paragon Solutions, it's only a matter of time before malware comes into play.

Calyx is better than base AOSP (barely imo), but if you have a Pixel, there is a much better option that might actually save your life if it came to it.