Refurbished pixel with grapheneOS pre installed

FrankfurtGoldenrod

So I just bought a used pixel 8 off of Swappa and it booted out of the box into a fresh install of grapheneOS, which is not what I expected to see. I checked it with Auditor and it appears clean.

Out of an abundance of paranoia I'm going to do a fresh install, but I'm curious what sort of attack vectors would I be exposed to if I didn't?

raccoondad

FrankfurtGoldenrod not much if the hardware is valid, and the signing key is the same as the official GOS key for your device. I still would reinstall just to be safe.