polygraph The 4 freedoms don't apply to what I am asking. Read it as freedom to remove components one does not intend to use.
The proper answer regarding freedom is that these are integral parts of the OS, so instead of messing with the OS on your phone, you're meant to fork it and build your own with your changes, creating your own verified boot key to keep the bootloader locked with your own key. This is very extreme and you lose the ability to use GrapheneOS's Auditor app (unless you fork it too…). The OS lets you avoid these system apps without ripping them out or having to build your own OS, but ultimately you can do whatever you want. You can also keep the bootloader unlocked and not have to sign with your own key, but this also has its issues.
polygraph The original question. Vanadium and SIM Toolkit were just random examples. I don't know what other default apps exist in Graphene.
A recent example of what user-facing apps a default installation includes:
https://discuss.grapheneos.org/d/28303-a16-qpr1-font/5
polygraph It is unlikely DNSCrypt's devs will visit the forum and read this. If they work together with Graphene's devs it would benefit Graphene, hence my previous suggestion to discuss technical questions on their GitHub tracker.
This isn't really specific to GrapheneOS, there's many apps including some that I've used before I had GrapheneOS that implemented DNS changing and ad blocking using a local VPN service to not require root. Needing to edit the HOSTS file with root access or other things like this hasn't been needed for a long time now. I honestly expected to find an APK within the “android” zip file from the GitHub project you linked to. The suggestion to post a feature request is a good one, though. Also possible to send them an email. Actually I thought about suggesting you to send an email to one of the apps I suggested, in case they lack the feature(s) you want, as they seem closest to having what you want.
polygraph DNS is not just about web browsing.
Okay well, I meant whatever isn't going through Tor. DNS has some security benefits, but it's much better to rely on TLS instead (or Onion services).
polygraph I am looking for one, hence my question.
The apps I gave you were the closest matches I could find. I don't use Anonymized DNSCrypt or Oblivious DNS-over-HTTPS so I can't help with it. Sadly it doesn't look like the projects listed in the DNSCrypt homepage have proper Android support either. I went through all of them.
polygraph Your question:
Please say what you want explicitly, because I still don't understand what you mean to say by pointing me to my own question. Sorry.
polygraph I am against any form of bigoted conformity.
I understand having all components free is an impossible goal due to existing hardware. If Graphene is deliberately against freedom though (which I doubt),
First of all, the existing hardware fortunately doesn't prevent you from doing anything. When installing GrapheneOS, you unlock the bootloader, replace the OS and the verified boot key, and relock the bootloader with the new key you installed. You could leave it unlocked, or install any other OS & key that you want.
What does happen is that GrapheneOS needs the bootloader to be locked, so the OS would be protected from tampering by malware. It prevents you from changing it too, including preventing you from gaining root access to bypass the sandbox. However, GrapheneOS includes a preinstalled open source end-to-end encrypted app called Seedvault that creates backups. (I admit, just before choosing GrapheneOS I was also debating with myself to choose root instead, but Seedvault was the last thing I needed to see that finally convinced me to choose GrapheneOS.) Seedvault has some issues, and the GrapheneOS team intends to replace it, as can be seen by their repeated comments about it in the release notes on the GrapheneOS homepage (just search for “Seedvault” and you'll see). GrapheneOS is open source, non-profit, and they've said that they're anti-authoritarian. Being opposed to authority is being supportive of freedom, right? So all in all, I feel like GrapheneOS is using the hardware security features in a very user-oriented way, and it makes me feel comfortable, and the competence of their team (and the fact that they're paid employees rather than volunteers) and all the security features ultimately feel liberating, I can rely them and my device, although maybe that's counterintuitive to you if you think about these security features as bad.
polygraph that is the same conformity, just inverted.
I also don't understand what you mean by this. But I'm also not sure if it relevant to what I answered above. But I'm saying it here to let you know.