I cannot use a custom ROM as I need apps that sadly enforce the Google Play Integrity API, and no GrapheneOS with Google Play Services dose not passes this check.

I am stuck between an iPhone and a Google Pixel.

I have government apps and a work app on my phone that I do not want to route through a VPN or any other type of proxy(All apps are in the Android privet spaces). The only thing I need to go through a VPN/proxy is my browser (I know brave have a VPN in their browser but I don’t want to use or pay for it and the DuckDuckGo vpn is system wide and the Firefox vpn does not have a Firefox exstention on iOS or android). I need to be able to change countries myself (I don’t think you can do that with Apple’s Private Relay), as I live in the EU and ID checks for social media, other things, and maybe even Wikipedia are coming soon. Android support split tunneling but iOS don’t.

I need to have Facebook Messenger installed on my phone and active all the time (I cannot put it into the private space feature on Android).

I use another service for mail and backup, so iCloud end-to-end encryption is not a plus for me.

I don’t communicate much over SMS, but I would be able to chat over iMessage instead of Facebook Messenger with some contacts.

  • Mugita Sokio@discuss.onlineEnglish
    41·
    3 days ago

    I’ll go ahead and break this down for you, so you can hopefully see where I’m coming from:

    In terms of things requiring the Play Integrity API, it’s a digital lock Google introduced in order to shun any AOSP OS’s like Graphene, and have only DRM’d bullspit in terms of the apps you can install on it. Graphene isn’t easily affected, as many apps right now don’t have the DRM.

    In the case of using your work app in a browser, I’d recommend making a profile on a Firefox-based browser (I’m using LibreWolf for my stuff), hardening it to the nines, adding a few good quality extensions on it (uBlock Origin, LibRedirect, and SimpleLogin for now). That way, you’ll be able to, at the very least, ensure you won’t be easily watched with bossware.

    For my experience with Proton, I tend to use it on the browser. My producer, Neigsendoig, has had a good experience with Proton, with a couple quirks on iOS that he’s since seen fixed. It’s the best email provider we’ve used, as we had no intentions on using Tutanota, despite Germany’s privacy laws being decent.

    For Messenger, I have a sneaking suspicion you’ll just want a device that has just Facebook stuff on it. Otherwise, maybe it’s possible to do a Facebook profile so that way your other ones don’t get touched, and Facebook only sees this particular profile for your Facebook stuff. As long as you firewall it, you should be fine for some cases.

    As for custom ROMs, Google won’t be killing them that easily if I’m not mistaken. I think it’ll be rare to find an app with this DRM you speak of, but they are out there. GrapheneOS will be making an OEM soon, and I wouldn’t mind trying that if Pixels are impossible in the future (which they look to be a little harder, but maybe not that much to begin with).

    Hopefully, you can see my thought process on this.

      • Mugita Sokio@discuss.onlineEnglish
        3·
        2 days ago

        In terms of Facebook Messenger notifications, probably have Google Play Services installed on that particular profile I mentioned… as that could be the safest bet.

        For the Google Play Services, I don’t have those installed, and I don’t use apps that require the Google Play notifications in my setup. If an app has notifications, it’s their own push notification services within the apps themselves.

        And for when I talked about my producer, this is him on his main channel and his personal channel. I’m his former editor, and the current narrator for a channel that’s currently inactive, being this one since the third video on the channel. I sound very similar to Neigsendoig in some circumstances.