PinePhone Security

[bosi564]

...
However, if #1-5 are fulfilled by a FOSS phone, then I would make the switch considering we cannot know what is hidden in Google's firmware (despite secure boot making it impossible to modify).

I think the software for the pinephone is not trustworthy yet[0]. Even if we accept that the volunteers, who prepare the distros, are doing their best, this is still a general-purpose computer with many options set to undesirable defaults for people looking for "security out of the box". Still, I use it daily because I expect it to be more secure than some alternative, cheaper devices.

[0] I've just found that on my phone systemd-resolve is listening on a port facing the internet and had to fix its settings. I hope someday I will be able to just uninstall it.