Automation without ADB or rooting

Dev2

Hello,
I usually use apps like Tasker or Automate to automatically change settings like Flightmode. Of course I can use ADB to get the needed superuser privileges, but I prefer to not have USB debugging activated for security reasons, as well as it has to be reactivated after each reboot (either via PC and USB cable, or Shizuku app via Wifi).

So I have 2 questions:
1.
Why does Android requires superuser rights, and not let it up to the users decision what rights to grant to an app? In general, why I am not allowed somehow to activate being the master of my own device, much like I can activate Developer mode? I understand the average user needs protection, but not anyone is a beginner and not every one wants to root the device and mess with the basis security.
2.
GOS allows the Automate app to acquire these two rights, but is still unable to perform things like activating Flightmode:
"full (super user) access to all device features and storage"
"privileged or full (superuser) access to device features and storage"
Are these rights not what they suggest to be, or how are they supposed to be used, e.g. from app like Automate?

Thanks a lot for your thoughts or alternative ideas!

DeletedUser87

Dev2 Why does Android requires superuser rights, and not let it up to the users decision what rights to grant to an app? In general, why I am not allowed somehow to activate being the master of my own device, much like I can activate Developer mode? I understand the average user needs protection, but not anyone is a beginner and not every one wants to root the device and mess with the basis security.

Because the system doesn't know your level of expertise. You would be surprised what the average user can break even without any superuser access. And this paragraph already contradicts your statement:

but I prefer to not have USB debugging activated for security reasons

because malicious code/apps can request these same permissions you can.
Androids security model falls in line with virtually every system out there where elevated privileges are only granted to a limited amount of users and processes. Disabling root access by default decreases attack surface massively and afaik is welcomed by pretty much every security researcher out there.

Stephan-P

I'd recommend Macrodroid (https://www.macrodroid.com/) combined with the Macrodroid Connectivity Helper app (https://macrodroidforum.com/wiki/index.php/Helper_App)

Dev2

Stephan-P
Thank you! Looks like this can enable/disable Wifi, BT, and mobile data, but not the complete mobile access like the Flightmode does. I need to turn this off completely to save battery when the phone is left alone without mobile reception. Otherwise it searches constantly and depletes the battery quickly.

Dev2

DeletedUser87
Well, this seems the main theme lately and in general: trading freedom for 'security'...

DeletedUser87

Dev2 this isn't a "lately" theme. It's the theme of development in the computing space in general and a byproduct of the time. When computers were first invented, no one thought about security. No one even thought that computers would connect one day over the internet. The "freedom" nature of computers established the foundation of pretty much every OS and program ever. Reverting all these changes would require heaps of control over the OS and developers. So far, only Apple has built a capable but pretty secure desktop OS. That took a lot of time, a lot of pain and a lot of breakage. When smartphones were invented, it was already clear that security had to be done properly this time and it was. Blackberry was on the forefront of this movement, targeting business customers with valuable data. Apple followed suit and had to promise an equivalent. Instead we introduced privacy invasive apps and services into our life - right when privacy was completely forgotten about. And that's where we're now.