The more significant changes (inactivity reboot, USB controls, MTE, controlling JIT in Chrome, cellular network attack surface reduction) was already in GrapheneOS for a long time. It's still good to see the stock OS implement these features, although I wished they gave users more choice and control with it.
GrapheneOS has an edge in all of these features compared to the stock OS. The inactivity reboot happens earlier by default and can be configured to happen as early as minutes. The USB control is disabled via hardware for us and you can even disable charging when booted to OS. We implement MTE in far more than just apps. You can have a LTE only option rather than just disabling 2G.
The majority of the rest are Google service related and aren't in the scope for us. Users can use a Google service on GrapheneOS if they wanted.
Final
npub1hx…sg75y
2025-05-16 22:00:30
in reply to nevent1q…jwlm
Author Public Key
npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75yPublished at
2025-05-16 22:00:30Event JSON
{
"id": "2fbecfe600d61d86c8a55ae850e4c03b263afb55b012d3d30b0a0e51f6fabf0e",
"pubkey": "b98ded4ceaea20790dbcb3c31400692009d34c7f9927c286835a99b7481a5c22",
"created_at": 1747432830,
"kind": 1,
"tags": [
[
"e",
"9f2bc308a3875d0740146b28084e865065689922e2df4f3eae2122f79d952a20",
"",
"root"
],
[
"e",
"af581fd46a73875d2fe83e978f3ee03e469d3355cd5624f43f26458569b7a2e5",
"",
"reply"
],
[
"p",
"609f186ca023d658c0fe019570472f59565c8be1dc163b1541fac9d90aa4e8af"
],
[
"p",
"181f334d46f8ec615ff12c0c987055ae8dc003a18967205baeeb27d41fe7d9f3"
]
],
"content": "The more significant changes (inactivity reboot, USB controls, MTE, controlling JIT in Chrome, cellular network attack surface reduction) was already in GrapheneOS for a long time. It's still good to see the stock OS implement these features, although I wished they gave users more choice and control with it.\n\nGrapheneOS has an edge in all of these features compared to the stock OS. The inactivity reboot happens earlier by default and can be configured to happen as early as minutes. The USB control is disabled via hardware for us and you can even disable charging when booted to OS. We implement MTE in far more than just apps. You can have a LTE only option rather than just disabling 2G.\n\nThe majority of the rest are Google service related and aren't in the scope for us. Users can use a Google service on GrapheneOS if they wanted.\n\n",
"sig": "36cec6566dcba671fa4a42af1346489dc31a29855e50bca9b8bc8c15f1793537e37fb7f5425b1acfc33f622a604b6cf846430147c2c434c03ad3674f59ea8c0c"
}