Google Play system updates

xIUPITERx

I am not yet a user of GrapheneOS, so this question may be trivial, but how are Google Play system updates implemented?
Are the they separated from the normal OS-updates as usual or are they part of the monthly security updates?

unwat

xIUPITERx

There's a GrapheneOS "Apps" app. You can install and update Google Play from that app.

There's a lot of information on the website about Google Play installation and some other helpful stuff here: https://grapheneos.org/usage#sandboxed-google-play

matchboxbananasynergy

xIUPITERx Hi there!

OS security updates are delivers through OS updates, unlike Stock OS where in some phones you may get such updates through Google Play.

A user on GrapheneOS who doesn't use Google Play Services is getting the same security updates as one who doesn't. Google Play is also not privileged on GrapheneOS so it can't really deliver the kinds of updates you're talking about, but it doesn't need to do so either, because you get everything and more from the OS itself.

xIUPITERx

unwat I don't mean the normal Google Play Store updates, but the Google Play System Updates. I think Google has modularized some security-relevant functions with Android 11 and has since distributed them with the system updates independently of the OS updates of the device manufacturers.

xIUPITERx

matchboxbananasynergy
Graphene OS has an update guarantee like other manufacturers, but the question is whether Google Play System updates will continue to be distributed after the end of the normal update period.

matchboxbananasynergy

xIUPITERx I'm pretty sure it won't work the same way on GrapheneOS.

What will happen is that after official support for the device is over, it will go into extended support release mode (it's unclear if this will happen from 6th gen and beyond, as those devices already have 5 years of official suppport), in which you'll continue getting AOSP updates until the next Android version, when extended support releases usually stop.

Either way, with or without these Google Play system updates, any device past its official EOL date can no longer be considered secure, so you should choose a device that provides enough of a lifetime, such as 6th or 7th gen.

You can find information about device lifetime here:

https://grapheneos.org/faq#device-lifetime

And the project's current device recommendations can be found here:

https://grapheneos.org/faq#recommended-devices

xIUPITERx

I know it's not ideal, but I try to keep my backup phone as up to date as possible.
Thanks for the clarification, but I still believe that there could be a way to deliver the Play System Updates independent from the OS Updates without Google tracking you.