Genghis

Aurora Store isnt needed because of Graphene's Sandboxed Google Play Services.

Obtainium app is best for installing APKs from github, fdroid, etc because of the auto updates.

My favorite feature of GOS is the scopes for contacts, storage, and MTE support on Pixel 8

pls buy a new phone lol

I would use Firefox on Android but I'm waiting until the security is on par with Chromium such as having internal sandboxing and site isolation.

Also since Firefox doesn't have a WebView implementation, it has to be used with the Chromium based one so it doesn't make sense for me to use two browser engines.

AOSP does get security updates first because GrapheneOS is based on unmodified AOSP. They are quick to port over updates though and they have extra features like hardened malloc and better user profile support.

Non pixel phones aren't secure because GrapheneOS doesn't support them. They aren't secure because they either don't have secure elements, broken verified boot, or don't properly support alternative operating systems. This makes phones like OnePlus, Fairphone, etc not secure enough for GrapheneOS.

DivestOS I would say is the least worst option when it comes to supporting EoL phones. They're at least honest about what they do and don't provide unlike what other OSes do. On their website, they tell you they aren't a secure OS and they can only try their best to reduce harm on an EoL device. DivestOS Security.

The only secure phone operating systems are either grapheneOS or stock. All the others usually are behind security updates.

For migration, I would just use a USB C drive and transfer files.

Passkeys are replacing MFA and passwords.

I just use the AOSP messenger. If I used google play services, I would switch to Google messages because of RCS and it looks much nicer.

Here is a more detailed explanation: https://privsec.dev/posts/android/f-droid-security-issues/

Accrescent is a new appstore that fixes all these issues but its still in alpha stage and has 11 apps right now.

I replaced fdroid with Obtainium that pulls apks from github,gitlab,fdroid,etc and it has support for auto updates. It's a little better than Fdroid but still has its own issues.