# iOS vs Android **URL:** https://discuss.privacyguides.net/t/ios-vs-android/10940 **Category:** General **Created:** 2022-12-13T00:12:03Z **Posts:** 43 ## Post 1 by @sbeve — 2022-12-13T00:12:03Z Since people talking about android vs iOS in [here](https://discuss.privacyguides.net/t/recommending-apple-products/10815), decide to make a separate topic for it > [@Recommending apple products](https://discuss.privacyguides.net/t/recommending-apple-products/10815/36): > > Besides, a very clear difference between apple and android when it comes to privacy is that the former relies on blind trust, whereas android’s source code can be read and modified (see grapheneos, divest, etc). That’s a luxury you don’t get with ios. fun fact: Many major components of Apple’s current operating systems (iOS, macOS, watchOS, tvOS) are actually open source. In fact, Apple contributes a lot of effort to many open source projects used in other operating systems: [Apple Open Source](https://developer.apple.com/opensource/) > [@Recommending apple products](https://discuss.privacyguides.net/t/recommending-apple-products/10815/36): > > And, security wise android also has significantly longer support periods. The pixels being 5 years for e.g, from which u can also add an additional year thanks to custom firmware. What pixel are you referring to (Pixel 4 and below seems to be reached EOL)? Further, is they even an android device that got major OS versions for 5 years. iPhone 8 which released 5 years ago still get the latest iOS update. Apple also [released](https://www.forbes.com/sites/gordonkelly/2022/10/29/apple-ios-1571-release-should-you-upgrade-new-iphone-update/?sh=245ec8d1cfb8) an update 2 months ago for older iPhone 6S (2015) and newer and iPad Air 2 (2014) and newer, a zero-day patch(not the first time). Kinda off topic but, android is a fragmented mess(due to many custom roms). Today, over 80% of iOS users are running the latest OS. On Android, that’s just now hitting 13%. The majority of Android users are running out dated code. Also doesn’t custom ROM like GrapheneOS and DivestOS lag behind android. Isn’t it better to use the default android version in Pixel(in terms of security)? Important to note that I am not up-to-date with android stuff --- ## Post 2 by @anon30510143 — 2022-12-13T01:29:42Z Good points, as far as I’m aware the Graphene devs do a very good job of keeping up with the latest Android updates. But yeah I think a lot of custom Android OS’s (technically ROM is an inaccurate term) lag behind the latest Android a bit. --- ## Post 3 by @sbeve — 2022-12-13T03:38:58Z > [@anon30510143](#): > > Good points, as far as I’m aware the Graphene devs do a very good job of keeping up with the latest Android updates. Assuming GrapheneOS team is similar Brave team where they able to keep up with chromium, this seems like not a concern (this is a bit [concerning](https://youtu.be/Dx7CZ-2Bajg), however I am unfamiliar with the situation). > [@anon30510143](#): > > (technically ROM is an inaccurate term) Oh, ok, that make sense since ROM stand for read-only-memory. Is it something similar to distros in the linux world? I am also curious how custom android OS work with [project mainline](https://www.theverge.com/2019/5/7/18531350/google-android-q-project-mainline-security-updates-play-store-io-2019) introduced by google. Since it offers, security update independent of the android version. --- ## Post 4 by @anon63378630 — 2022-12-13T07:09:40Z > [@404](#): > > Also doesn’t custom ROM like GrapheneOS and DivestOS lag behind android. Here are dates of when Google and some aftermarket systems publish the monthly security updates (ASB) and Chromium updates: - [https://divestos.org/misc/a-dates.txt](https://divestos.org/misc/a-dates.txt) - [https://divestos.org/misc/ch-dates.txt](https://divestos.org/misc/ch-dates.txt) It doesn’t take into account everything, for example GrapheneOS often ships newer versions of components such as the kernel and drivers (eg. Mali) than Google does. Another one: Google typically does Chrome updates in staged rollouts and both GrapheneOS and my DivestOS often release to users faster. See also this overview: [https://divestos.org/index.php?page=patch\_levels#osSecurity](https://divestos.org/index.php?page=patch_levels#osSecurity) --- ## Post 5 by @sbeve — 2022-12-13T08:13:53Z It is also interesting that DivestOS recommend GrapheneOS. > Does DivestOS make my device secure? > The short answer: No. > The long answer is that DivestOS is likely the best harm reduction option if your device is no longer in support by its manufacturer or vendor. > Any project or product claiming they make end-of-life devices secure should be rigorously scrutinized. > If you want a reasonably secure and well-maintained device, please acquire a newer Pixel (6/6a/7) that is fully supported by GrapheneOS and use it instead. > Lastly it must be noted that privacy and security go hand-in-hand, there is a fundamental limit of how much privacy you can achieve if you do not have security backing it up. So is DivestOS for EoL pixels? --- ## Post 6 by @jonah — 2022-12-14T15:01:29Z > [@404](#): > > So is DivestOS for EoL pixels? DivestOS supports a wide variety of devices, and provides _better_ security than the stock OS in most cases, but not the more advanced level of security provided by projects like GrapheneOS. --- ## Post 7 by @sbeve — 2022-12-14T22:29:32Z Oh ok. I have also been seeing e-os time to time. How this compare to DivestOS since they supports a wide variety of devices. --- ## Post 8 by @sbeve — 2022-12-14T23:13:38Z I am also curious about how the app compatibility looks like in android forks like grapheneOS. As an average user, tend to use banking apps or PayPal that relies on Google Play Services. --- ## Post 9 by @anon63378630 — 2022-12-14T23:47:24Z > [@404](#): > > I have also been seeing e-os time to time This was already covered in my above links. - [https://divestos.org/index.php?page=patch\_levels#others](https://divestos.org/index.php?page=patch_levels#others) - [https://divestos.org/misc/e.txt](https://divestos.org/misc/e.txt) - [https://divestos.org/misc/a-dates.txt](https://divestos.org/misc/a-dates.txt) - [https://divestos.org/misc/ch-dates.txt](https://divestos.org/misc/ch-dates.txt) --- ## Post 10 by @mika — 2022-12-15T03:39:58Z GrapheneOS has Play Services. The only things that don’t work, as far as I know, are: 1. _Some_ banking apps (because GOS fails Safety Net) 2. Android Auto Compatibility, therefore, is in the 99.5%+ range. --- ## Post 11 by @Lumber0147 — 2022-12-17T11:02:52Z You created multiple thread advocating for apple while unneccessarily bashing Graphene OS at the same time. Coincidence? Dont you think one thread is enough? No offence, seems to me like concern troll. Edit: due to being flagged I apologize if the above phrasing of words sounds offending in any way but due to forums and groups often being infiltrated by trolls or users acting in bad faith Im a bit concerned about the intention of this user. He also made a post rn about Google providing e2e for their webmails even when Google holds a master key. --- ## Post 12 by @sbeve — 2022-12-18T09:20:15Z > [@Lumber0147](#): > > You created multiple thread advocating for apple while unneccessarily bashing Graphene OS at the same time. I did not bash GOS. I think it is fair to be concern as many notable sources like techlore question the support & security of GOS and android forks in general. Further, by the removal of bromite in PG as it was unable to keep up with upstream. Also, avoid criticising me (as you seems to do in multiple topics), if you think my ideas are disagreeable criticise them instead. --- ## Post 13 by @Lumber0147 — 2022-12-18T18:42:16Z Bromite doesnt have anything to do with GOS. The default browser there is Vanadium. Please inform yourself correctly before making statements about such sensitive privacy topics. I didnt watch Techlores video about GOS yet but its from 3 years agon where many feature like the playservices compatibility werent implemented yet. I know there was also some beef going on between the Calyx OS community and the GOS one where he did a video about a while ago but this hasnt anything to do with the qualitiy of the OS itself. --- ## Post 14 by @sbeve — 2022-12-18T22:47:39Z > [@Lumber0147](#): > > The default browser there is Vanadium. Please inform yourself correctly before making statements about such sensitive privacy topics. That is not the point. Bromite which was recommended by PG was removed due to it being unable to keep up with the chromium upstream. Bromite lag behind updates making it not secure a browser. Same thing could happen with GOS (or any android fork). It might be a matter of when, not how. > [@Lumber0147](#): > > I know there was also some beef going on between the Calyx OS community and the GOS one where he did a video about a while ago but this hasnt anything to do with the qualitiy of the OS itself. Yes, FOSS shouldn’t have those issues. This video too: > **[I’m Leaving Custom ROMs - Here’s Why.](https://www.youtube.com/watch?v=LJXFqM2OC1Q&feature=youtu.be)** > > Here's why I (reluctantly) ditched my custom ROM for Stock Android! Threat Modeling Video: https://youtu.be/DHZRhboZhfIAs stressed in the video: This is part... --- ## Post 15 by @anon30510143 — 2022-12-19T00:20:53Z > [@404](#): > > That is not the point. Bromite which was recommended by PG was removed due to it being unable to keep up with the chromium upstream. Bromite lag behind updates making it not secure a browser. > Same thing could happen with GOS (or any android fork). It might be a matter of when, not how. Well we go by their track record, which GOS has an excellent track record. I don’t expect them to fall behind on updates. --- ## Post 16 by @Lumber0147 — 2022-12-19T11:44:39Z > Same thing could happen with GOS (or any android fork) The same can happen with every software. Theres literally no hint or evidence suggesting this being a possibility for GOS. The guy in the bottom video explains that this move is primarily motivated because he’s becoming a somewhat high profile individual who is more likely to be the focus of attacks, which is nonsense, being a semi-popular privacy YouTuber doesn’t make you a high profile target. He doesnt talk about GOS at all. Also keep in mind, there was some conflict between techlore, calyx and graphene GrapheneOS allows to use Google’s Advanced Protection Program with Sandboxed Play Services. It provides security updates very fast, sometimes even faster than stock. And you get all the privacy features and security hardening on top The OS has an excellent track record, contrary to Apple, Edward Snowden uses it. --- ## Post 17 by @aalex — 2022-12-19T11:54:51Z > [@Lumber0147](#): > > It provides security updates very fast, sometimes even faster than stock. I don’t think any ROM can push out updates before stock as Google releases the update as soon as it’s ready. There is no way any third-party could get the code to push that update earlier. --- ## Post 18 by @Lumber0147 — 2022-12-19T12:14:14Z They use GKIs (generic Kernel Images) --- ## Post 19 by @anon63378630 — 2022-12-19T14:32:50Z > [@aalex](#): > > I don’t think any ROM can push out updates before stock as Google releases the update as soon as it’s ready. It actually is possible, because Google does staged rollouts where only so many % of users receive the update over the first few days, in case of a bad update. For example: [Google Pixel Update - December 2022 - Google Pixel Community](https://support.google.com/pixelphone/thread/191508547/google-pixel-update-december-2022?hl=en) > We have provided the monthly software update for December 2022. All supported Pixel devices running Android 13 will receive these software updates starting today. The rollout will continue over the next week in phases depending on carrier and device. --- ## Post 20 by @aalex — 2022-12-19T16:18:27Z That’s interesting. I had heard of the term “rollout” but didn’t fully understand it and didn’t know it applied to security updates too. Surely the rollout won’t take very long though, so GOS users would only get it a few days early? --- ## Post 21 by @sbeve — 2022-12-20T00:37:30Z > [@anon63378630](#): > > It actually is possible, because Google does staged rollouts where only so many % of users receive the update over the first few days, in case of a bad update. Isn’t this just feature updates. In the iOS (or any iDevice OS) there are Rapid Security Responses. Rapid Security Responses run independent of software updates and don’t adhere to the managed software update delay. I think google does have something similar to this. The updates are delivered through Google Play Store. I assume Google Play Store is not available on GOS. --- ## Post 22 by @Lumber0147 — 2022-12-20T06:48:03Z As stated in acomment above, playservices and playstore are avaible on GOS and run sandboxed. GOS also use Generic kernel images which allows a more up to date kernel than stock android sometimes. --- ## Post 23 by @sbeve — 2022-12-20T08:05:51Z > [@Lumber0147](#): > > As stated in acomment above, playservices and playstore are avaible on GOS and run sandboxed. Sure, but I don’t think GOS gets Google Play System Updates. > Google can push security updates for some system components via the privileged Play Services. source: [https://www.privacyguides.org/os/android-overview/#google-play-system-updates](https://www.privacyguides.org/os/android-overview/#google-play-system-updates) and when you look at GOS > Google Play receives absolutely no special access or privileges on GrapheneOS as opposed to bypassing the app sandbox and receiving a massive amount of highly privileged access. source: [https://grapheneos.org/usage#sandboxed-google-play](https://grapheneos.org/usage#sandboxed-google-play) --- ## Post 24 by @Lumber0147 — 2022-12-20T14:54:02Z > Sure, but I don’t think GOS gets Google Play System Updates. They get updates, like Gapps get on every Custom Rom as soon as they are avaible > and when you look at GOS And? I dont get your point, you either dont seem to understand anything about the afromentioned information about GOS or you try to be intentionally misleading. The playservices are sandboxed, means they run without permissions so they cant grab your data or be used as attacked vector. Hows this related to the update process on GOS? --- ## Post 25 by @anon82677111 — 2022-12-20T15:14:59Z Stock Android on a Google Pixel is considered more secure than iOS. I think most people should just use stock Android and stay away from other Android OS’s unless their threat model calls for not using Google services, in which case, use GrapheneOS if you’re experienced and understand the risks of using it. You’re unlocking the bootloader (even if it can be relocked), trusting a lesser-known party with your data, you might void your warranty, and could brick your phone. I don’t recommend DivestOS at all. It’s meant to be a harm reduction project for people whose phones have reached EoL and cannot afford to upgrade to a new phone. It’s much less secure than stock Android and should only be used as a last resort. Stock Android users **should** enable Google Play Services and only install apps from the Google Play Store. There’s no way around this. The Aurora Store and F-Droid are notoriously insecure. --- ## Post 26 by @Lumber0147 — 2022-12-20T15:37:16Z Security and privacy are 2 different things. You wildly conflate them. Sandboxed playservices on GOS are easy and save to use. GOS is FOSS and has proven a good track record, theres no reason to dont trust them. The code is also audited. > **[GrapheneOS Frequently Asked Questions](https://grapheneos.org/faq#audit)** > > Answers to frequently asked questions about GrapheneOS. > **Is GrapheneOS audited?** > Yes, the GrapheneOS code is reviewed by external security researchers, companies and organizations on a continuous basis. --- ## Post 27 by @anon63378630 — 2022-12-20T17:58:36Z > [@anon82677111](#): > > I don’t recommend DivestOS at all. It’s meant to be a harm reduction project for people whose phones have reached EoL and cannot afford to upgrade to a new phone. It’s much less secure than stock Android and should only be used as a last resort. This is a bit misleading. In the case of an EOL device, DivestOS would be more secure than stock. Please read my notes: [https://divestos.org/index.php?page=patch\_levels#osSecurity](https://divestos.org/index.php?page=patch_levels#osSecurity) And it also _does_ provide more secure (than stock) builds for non-EOL devices, eg. FP3 and FP4. And minimally equally secure (as stock) builds for select devices, denoted by a ★ on that page. --- ## Post 28 by @sbeve — 2022-12-20T22:45:00Z > [@Lumber0147](#): > > The playservices are sandboxed, means they run without permissions so they cant grab your data or be used as attacked vector. Hows this related to the update process on GOS? Play services need privileged permission to receive “system updates” (since system files need to be changed) which I assume is similar to [rapid security responses](https://support.apple.com/en-gb/guide/deployment/dep93ff7ea78/web). Without no “no special access or privileges” to play services, GOS won’t get security updates via play store. --- ## Post 29 by @sbeve — 2022-12-20T23:07:22Z Ok I think this is the summary. - GOS is a great option for the niche privacy audience who prefer open source software. - For very small number of users who face grave, targeted threats to their digital security, stock android with Advanced Protection program or iOS with lockdown mode enabled is the best option - For the average Joe who bought a pixel, stock android is the best since most apps won’t fail. - Everyone else, iPhone is the best option since it offer great privacy and security without effecting convenience. --- ## Post 30 by @anon20402919 — 2022-12-21T00:23:56Z I still don’t see why grapheneOS would be a less good solution in case of a targeted threat… It offers much more than Advanced Protection program and it partially supports it, including the most interesting feature, requirement to log into the account with a key. GrapheneOS update delays have been posted above, and are exceptionally fast and regular. --- ## Post 31 by @Lumber0147 — 2022-12-21T06:50:42Z You deliberately conflate privacy with security, even then even Stock Android is on par with iOs security wise, contrary to what you claimed in the now closed thread, where we discussed a few days ago. GOS isnt jzst a modified stock rom, its an OS on its own which is based on AOSOP. Even without playservices installed you get updates and patches every few days and generic kernel images allow GOS to have a more up to date kernel than the stock OS. gOS also contains security enhancements which soleley purpose are to migiate the possibiliyies of zero day exploits. Anyway were are on a privacy sub here so relying on google or apple applications and services in order to sacrifice privacy for no or an unsignificant gain of security is out of question. Using GOS without playservices or playservices without per.issions is the best you can get privacy and security wise. --- ## Post 34 by @sbeve — 2023-01-05T00:31:21Z > [@anon20402919](#): > > I still don’t see why grapheneOS would be a less good solution in case of a targeted threat… Yea, maybe it could be. But, GOS team can’t match or take the responsibility of a dedicated security team that google got. Specially when you are facing targeted threats to digital security. > [@Lumber0147](#): > > Anyway were are on a privacy sub here so relying on google or apple applications and services in order to sacrifice privacy for no or an unsignificant gain of security is out of question. Using GOS without playservices or playservices without per.issions is the best you can get privacy and security wise. You _Can’t_ Have Privacy Without Security --- ## Post 35 by @Anon — 2023-01-05T02:12:31Z This is an obvious joke from someone who know NoThInG about security and cyberattack-defense. GOS is not just about open source software as LineageOS with microG will be the general libre deGoogled option. GrapheneOS is all about attack defense, it has a long history of actively preventing new undiscovered (i. e. 0day) exploits from working, such as the ones Pegasus by NSO use, while iOS just started recently to catch up with introduction of Lockdown mode in iOS16. GrapheneOS isn’t about stupid open-source ideology either, as it gives you the option to use Google Mobile Services, albeit in a safer way in a sandboxed rootless environment. If you even bothered to take a look at GrapheneOS project’s documentation, the first section is [Defending against exploitation of unknown vulnerabilities](https://grapheneos.org/features#exploit-protection), quote, > GrapheneOS is heavily focused on protecting users against attackers exploiting unknown (0 day) vulnerabilities. Patching vulnerabilities doesn’t protect users before the vulnerability is known to the vendor and has a patch developed and shipped. > … > The vast majority of local and remote code execution vulnerabilities are memory corruption bugs caused by memory unsafe languages or rare low-level unsafe code in an otherwise memory safe language. Most of the remaining issues are caused by dynamic code execution/loading features. Our main focus is on preventing or raising the difficulty of exploiting memory corruption bugs followed by restricting dynamic code execution both to make escalation from a memory corruption bug harder and to directly mitigate bugs caused by dynamic code loading/generation/execution such as a JIT compiler bug or a plugin loading vulnerability. essentially what GrapheneOS focused to do is to preemptively avoid the same attacks that made Pegasus penetrate your iPhone through Safari via memory corruption. And judging by its long development [history](https://grapheneos.org/history/) it has some expertise at that. I don’t mean that normal people face these sophisticated attacks, or that your point 3 and 4 is wrong (as long as the average Joe doesn’t care about security/privacy), but this totally refutes your point 1 and 2. In fact the beauty of Android is having all of these choices, from the stock ROM for working OTA/keystore/DRM out of the box, to a revival ROM like LineageOS that continues to support old devices with newer Android version and security patches, to a libre/no tracking ideology ROM like /e/OS or LineageOS with microG, to near-OpSec-grade security/hardening for targeted individuals like GrapheneOS. With iPhone, four years of support of running one close-sourced ROM, then EOL, and no security patches, attack mitigation totally depends on one company (Apple) in contrast to droids with unlockable bootloader/Pixels where any ROM can do the job of mitigating attacks, even if GrapheneOS terminates development one day another team can carry it on and make a better fork for those who need a 0-days proof phone. The choice of browser engines and setting truly-private browsers like Tor Browser as default on Android also mean that you can partially avoid many WebView-based memory corruption attacks that try to drop and persist malware like Pegasus on your phone, in contrast to iPhone where Safari is your only choice and Safari exploits are widely sold on hacker forums. --- ## Post 36 by @sbeve — 2023-01-05T02:58:23Z > [@Anon](#): > > This is an obvious joke from someone who know NoThInG about security and cyberattack-defense. Hey let keep the decision rational and avoid attacking people. I am not saying GOS is not secure. However, it is just not the go-to choice for the average person. Here are some few corrections tho, > [@Anon](#): > > With iPhone, four years of support of running one close-sourced ROM, then EOL, and no security patches Four years are only for _feature_ updates, 7+ years generation behind iDevice still gets _security_ updates with a strong track record. There aren’t any android devices i am aware of getting this much support. > [@Anon](#): > > attack mitigation totally depends on one company (Apple) Apple Security Bounty program reward researchers and individuals who find vulnerabilities in the system. So not just Apple. --- ## Post 37 by @Lumber0147 — 2023-01-05T16:40:00Z > Play services need privileged permission to receive “system updates” the system update process is independent from playservices. Especially on GOS. You can receive OS updates just fine with every Android OS without having playservices installed or enabled. > I assume is similar to As I already wrote stop your assumptions, they are wrong > Hey let keep the decision rational and avoid attacking people. you constantly make baseless assumptions without delivering any real facts. Obviously you seem to know very little about the things you try to talk about. > However, it is just not the go-to choice for the average person. Why? In terms of usuability its the same as Stock Android. > But, GOS team can’t match or take the responsibility of a dedicated security team that google got. Another baseless ridicolous assumption. You just claim things like that out of thin air the whole time. Its pointless have a discussion that way. GOS is based on AOSP which is developed by google, so GOS’ security features come ON TOP of Googles’. Again, I suggest to inform yourself before making such claims. I mean we get it, you love Apple and in your view its superior but thats no excuse for your deliberate attempts of agenda pushings with such baseless assumptions and false facts. That is toxic especially for our small but precious community. Edit: I don’t know why this post has been flagged as innapprobiate, I guess someone here doesn’t like different opinions. --- ## Post 38 by @sbeve — 2023-01-05T22:52:39Z > [@Lumber0147](#): > > Why? In terms of usuability its the same as Stock Android. Without a proper support for Google pay, and some bank apps (due to lack of safety net), casting and other issues that affect the overall user experience it is hard to recommend GOS for the average Joe. It is worth noting that GrapheneOS is still in active development, and the team is working to address any usability issues that may arise. GOS is a great option for a niche audience who are willing to sacrifice usability to de-google their phone, to use open source software or just looking to go above and beyond. iOS offering privacy-friendly options _out of the box_, without sacrificing convenience make it a pretty good option for average Joe. iOS, vanilla android and GOS seems to be offering very good security overall. Apple and Google also have a strong track record of fixing security vulnerabilities in a timely manner. Since GOS is an android fork it receives the same security vulnerabilities as vanilla android. So the only concern is that GOS is either unable to keep up with the security updates, or introduce their own vulnerabilities. This seems to be not a concern, as the present state of the project. However, it is worth noting that no operating system is completely immune to security threats, and it is important for users to take steps to protect themselves online, regardless of the operating system they are using. --- ## Post 39 by @Anon — 2023-01-06T02:06:10Z > [@404](#): > > MMS, RCS That’s exactly an issue on Apple’s side. End to end encryption for RCS has already been implemented and RCS specification is open, now giving Apple the choice to either adopt RCS or open up iMessage APIs, but it is doing nothing. The texting issue is not created by AOSP, Google, nor by GOS. Personally I think iMessage vs RCS is not that much of a problem and I can’t care less about “green bubbles vs blue bubbles”, as the texting app bundled by the OS is usually not the best option compared to Signal, Briar, Element, etc. which is fully auditable. > [@404](#): > > iOS offering privacy-friendly options _out of the box_ Not really, there are a lot of sneaky things in iOS OOB. For example, iOS’s default browser, Safari, by default enables “Privacy Preserving Ad Measurement”, which is the equivalent of Google’s Privacy Sandbox, but Apple didn’t face the same backlash as Google becoz of its privacy “fame”; App Store is set to “personal recommendations on” by default which makes it just as privacy invasive as Google Play out of the box if the personalization is not turned off; let apps request to track introduced in iOS 14, I’d admit, is a better Ad ID system than the old one Google GMS is still using as even the Joe can easily choose to hide their Ad ID. Apple Advertising is also defaulted to on, it claims the audience groups you’re placed in is large with thousands of users, but still it’s very possible to denonymize individuals in the group. > [@404](#): > > Apple and Google also have a strong track record of fixing security vulnerabilities in a timely manner. Since GOS is an android fork it receives the same security vulnerabilities as vanilla android. That is the case. But known security vulnerabilities (most of the time exploit achieved through memory corruption) is a thing, and GOS’s mitigation method is another unique thing, as it hardens many aspects of the system to prevent new 0-days from being effective, sacrificing some performance for security. GOS has a lot of security improvements, and it is often the first to add these security improvements, often GOS upstream them to AOSP. > [@404](#): > > However, it is worth noting that no operating system is completely immune to security threats, and it is important for users to take steps to protect themselves online, regardless of the operating system they are using. This one is true and should be displayed on the guides. Using a lot of tools but not using brain on the Internet is not going to protect you. --- ## Post 40 by @sbeve — 2023-01-06T03:27:18Z > [@Anon](#): > > let apps request to track introduced in iOS 14, I’d admit, is a better Ad ID system iOS and Android have permissions systems that allow users to control which apps have access to certain data and functionality on their device. In general, iOS has a more granular permissions system, which gives users more fine-grained control over their privacy. iOS tend gives control to the user, not so much to the developer. > [@Anon](#): > > For example, iOS’s default browser, Safari, by default enables “Privacy Preserving Ad Measurement”, which is the equivalent of Google’s Privacy Sandbox While it is on by default, Intelligent Tracking Prevention (ITP) and fingerprinting defense are also turned on by default in safari. and I would say any browser is better than chrome. > [@Anon](#): > > Apple didn’t face the same backlash as Google becoz of its privacy “fame” I think it is quite the opposite. Apple is often held to a higher standard when it comes to privacy, due in part to its strong privacy stance. As a result, when Apple is perceived to fall short of these expectations, it may face more criticism than other companies. > [@Anon](#): > > App Store is set to “personal recommendations on” by default which makes it just as privacy invasive as Google Play out of the box if the personalization is not turned off; App Store give you the choice to turn off personal recommendations when you first open it. So not by _default_. Privacy and security features can sometimes come at the expense of convenience. For example, some privacy-focused features may require more setup or configuration, or may limit the functionality of certain apps. However, iOS does offer a number of privacy-focused features that are designed to balance the need for privacy with the need for convenience (for example Siri mostly uses on device machine learning and any information used to personalize things for you across your Apple devices is synced over iCloud using end-to-end encryption). --- ## Post 42 by @Lumber0147 — 2023-01-06T07:21:00Z Edit: Since my posts keep getting flagged for no reason I repost my response. > Without a proper support for NFC, google wallet, and many bank apps, MMS, RCS, casting and other issues that affect the overall user experience it is hard to recommend GOS for the average Joe. GOS supports NFC and most banking apps as someone already told you previously in a discussion here. Stop. Spreading. Lies. And if you care about privacy you shouldn’t something like google wallet or mms. MMS isn’t even used anymore nowadays. > You _Can’t_ Have Privacy Without Security And I never said otherwise, but you wildly conflate these two things without any justification or without that it would make sense > Yea, maybe it could be. Many things “could” be, thats not a factual argument, this is nothing. Makes your participation on this forum even more look like soapboxing. > However, iOS does offer a number of privacy-focused features As already pointed out numerous times on this forum **iOS is NOT privacy friendly** and Apple will collect and use your data **even when it’s turned off in the settings**. Still you choose to ignore the facts insist on your false claims regarding that on the expense of other users who come here to inform themselves. --- ## Post 43 by @dngray — 2023-01-06T07:26:27Z I feel that this is a continuation of the other thread. If I’m being frank, here there is misinformation. --- ## Post 44 by @dngray — 2023-01-06T07:26:32Z