Conversation

CalyxOS is a much different kind of project from GrapheneOS. It's not a hardened OS. It doesn't have exploit protections and the privacy/security enhancements of GrapheneOS (grapheneos.org/features). CalyxOS is still based on Android 12 without the full August security update.
1
1
They're missing current security patches for the firmware, OS and WebView / web browser. They're going to fall further behind. They fell 3.5 months behind on full security updates last year because that's how long it took them to migrate to Android 12. That's really important.
1
1
Pixels immediately move to new major releases of Android. That means it becomes necessary to be based on the latest release to ship full security updates, since the firmware, drivers, and all other device-specific components for Pixels are only developed for the latest release.
1
1
Even if someone doesn't care about having the kind of features offered by GrapheneOS, they should care about having full security updates. App compatibility with microG is also far lower than the sandboxed Google Play approach. Most apps from Play Store won't work. Not the same.
1
1
We developed sandboxed Google Play because we couldn't accept the missing security checks in microG, but sandboxed Google Play also offers near full app compatibility as opposed to github.com/microg/GmsCore and lack of Play Store support. The gap is growing, not getting smaller.
The number of Play services APIs is rapidly growing. The majority of the modules aren't listed on that page. Apps on the Play Store tend to depend on more and more of the Play services APIs. They increasingly depend on the Play Store for Asset/Feature delivery and other APIs.
1