SimpleX Messenger is a great option.

and some people are ignorant

Thank you. I wouldnt have known this if it wasn’t for this post. I’ve never seen these sites. Good post.

This does not solve the Play Integrity API issue. This would make app compatibility even worse lol.

Only a few apps enforce Play Integrity so it is still the best option for a casual user. Cash App enforcing it is my biggest hurdle.

XMR is decentralized and its seen as a currency

anyone know the name of this case? asking for a friend

Nostr must be a bigger tree

Why isn’t it possible for a creator to exist?

Why is a windows computer not my computer? makes no sense

The desktop security model is insecure in general. Phone OSes are much more secure.

Reasonable desktop OS to use is Qubes, Fedora, MacOS, ChromeOS, or Windows pro/enterprise (hardened)

Phones are much more secure especially the Pixel 8/pro with MTE immensely reducing remote exploitation. GrapheneOS is the only distro that enables MTE by default and recently implemented it in their Vanadium browser.

Secure phones (secure elements are important): IPhones and Pixels (GrapheneOS or stock)

Also yes, Chromium is much more secure on Linux than Gecko based browsers because of its great internal sandboxing and site isolation. Firefox on Windows is catching up though, but still bad on desktop Linux and android.

This all doesn’t matter if you’re running an EoL device. Make sure your receiving official security and firmware updates.

that’s about it

I recommend you purchase a Google Pixel 6a or above (minimum security support ends July 2027) and flash GrapheneOS. (Pixel 8/pro preferred)

Aurora Store doesn’t avoid Google since a lot of the apps from the play store include Google’s SDK and libraries. microG also doesn’t avoid Google as it is still running proprietary Google code and has more privacy/security weaknesses

Sandboxed Google Mobile Services is a much better implementation which is featured in GrapheneOS. The services are not privileged and is treated like any other app. They don’t downgrade privacy or security unlike the other alternatives.

There are much more privacy and security benefits using GOS. Here is a 3rd party comparison between different mobile OS.

I think your thinking im against FOSS but you’re not understanding. Many people in the FOSS community only care about privacy and ignore security. A developer can implement security benefits to FOSS but many people don’t care to do it.

Accrescent is FOSS and it has much higher security benefits than F-Droid. Accrescent allows both open and closed sourced apps because there’s no benefit being exclusive to having FOSS apps in their catalog.

If the user chooses to not use proprietary apps on Accrescent, they don’t have to install them.

2 - Manual installation methods can be insecure because a lot of people don’t update their apps all the time. Obviously rooting a phone is insecure, but having no auto updates in 2023 is crazy.

4 - It is very true, having zero quality control on new apps. The flagging of apps with problems is just following the FOSS philosophy. Any FOSS app can be added to F-Droid.

5 - Not sure why you would want to install abandoned apps on F-Droid, let alone use an EOL device. A lot of people don’t check if apps are maintained because they trust their app store.

6 - FOSS doesn’t automatically mean its secure or private. Also, why is it that I have to install proprietary apps only on the Google Play Store?

7 - FDroid signing keys isn’t an advantage because it requires an extra layer of trust. I’m already trusting the developer by installing their app, so the developer should be signing the keys. This is a reason why Signal is not on F-Droid.

F-Droid has many security vulnerabilities and has many issues such as:

1. Hosting an outdated APK client.
2. Utilizes an obsolete installation method.
3. Does not take advantage of modern appstore features.
4. Has no moderation.
5. Has no old app deletion.
6. Has an arbitrary FOSS only rule.
7. Does all building and signing themselves.

If you want more details about these issues read this:

https://privsec.dev/posts/android/f-droid-security-issues/

This app isn’t fully ready yet but Accrescent is a secure and private app store for Android. It aims to be a better alternative app store on Android rather than using the Google Play Store. It currently has 11 apps right now and more to come soon.

Highly recommend to check out and support this project cuz this appstore is the best out there right now security and privacy wise.