GrapheneOS (with sandboxed GApps) vs LineageOS for microG - which is better for striking a balance between usability, privacy and having control over my system?

[jonah (Jonah Aragon)]

DivestOS' unprivileged microG implementation

Latest release of my DivestOS can now run microG in an unprivileged manner: not a privileged system app and not a regular system app not pre-installed no special permissions no automatically granted permissions feature gated behind a toggle in Settings user must install the apps themself only available to the profile the user installed it to signature spoofing is behind the toggle and bound to the official microG build certificates and gated with version code and target SDK checks and can only…