Should I worry about malware on the Android device prior to installation?

Deep_Eggplant9544

If I got my device second-hand, is there a possibility that when I try to install GrapheneOS, malware can jump from the device to the host OS, infect the host OS, and then after I unlock the Android device's bootloader, it can infect the bootloader and compromise the device from the beginning?

evalda

Deep_Eggplant9544 while theoretically possible, this is very very very unlikely in reality...

Using a secure device like a Chromebook or another GOS (or even stock Pixel) to flash your second-hand device would make this risk even smaller.

Again in any case, it's not something I would worry about.

Deep_Eggplant9544

evalda yeah I've heard malware jumping across OSes is extremely unlikely, but it's reassuring to hear confirmation from some experts here. Especially in a forum where security is the utmost concern.

or another GOS (or even stock Pixel) to flash your second-hand device would make this risk even smaller

Wow I did not know you could use another GrapheneOS device to flash GrapheneOS. That's incredible. We should have a PGP chain-of-trust style system where everybody gets their installation from somebody else's installation, starting with the GrapheneOS lead developer as the root