Pinephone user experience - Possibly compromised by commercial & state-based hackers?

[RTP]

I imagine more so, certain mainstream, high volume selling, well known phones *required for <insert that most commonly recommended privacy phone OS here> would be a much more likely target at supply chain level (I'm sure you can guess which one).

Numerous more sales, increases likelihood of getting 'interesting' user/ high value targets.

As is, GNU/Linux on a phone used as openly as one would installing apps to Android (installing various random convenient apps) is open to all kinds of targeting.

I ask myself: is PP, a relatively lower volume selling phone, more prototype realm than mainstream, carrying a community of developers exploring hardware at deeper levels than many flagship communities, to increase support, really more likely a target?

On average, GNU Linux is not something that comes relatively secured (Ubuntu Touch offers a better start).

If you, yourself are the one interesting enough, someone will reach out, with a valuable link, something you might like, or from someone you know.

I'd say the chances are greater, if you were compromised, that you downloaded or ran something harmful. That's usually the case.