I currently use GrapheneOS on a Pixel 10 Pro Fold. I'm not a journalist or activist and probably won't ever be subject to a targeted attack.
I install all apps except for Beautyxt, Auxio and LibreTube from Google Play. I use Gmail for my personal email, although I don't use the full G-suite of apps (Keep, Docs, etc), I also use Google Health with a Fitbit Air. Health has the following (required) permissions:
- Health, Fitness and wellness
- Location (always)
- Nearby Devices
- Network
- Notifications
- Physical Activity
- Sensors
other apps that could be classified as "privacy invasive" which I use are:
- Gmail
- Pixel Weather
- Google Contacts
- Gboard
- Pixel Camera
- Recorder
- Google Maps ( I also use comaps for offline nav but Google maps when I have internet)
- banking apps
- transport apps
Benefits of GrapheneOS for me are:
- Storage Scopes (I don't need them, but they could be useful)
- Exploit protections
- Network permission
- security preview releases (faster patches)
- Vanadium's built-in AdBlock (although there is the third party build of it available on play store)
Benefits of Stock would be:
- Google Pay (this is important to me)
- the ease-of-use and QoL features stock has (some of the features like nausea prevention using dots on the screen are important to me)
- Apps not breaking suddenly because of Play integrity API (this happened with my bank's app and is something I want to absolutely avoid)
When using stock, I would be using APP for the device (I already do for the account). I would have to install the apps I use that aren't on the Play Store and update before enabling APP for the device.
I want to be clear that I fully understand that GrapheneOS is far more secure than the stock OS and will always be the better choice because of the huge amount of under-the-hood improvements, however I am very torn between being constantly reminded of the lack of features I'd like to have and knowing that I would have quire a bit worse security. Privacy from Google isn't something relevant to my case obviously.
After reading other threads on the forum about the same topic, I'm still unsure and would love to hear what other people think. Please just keep in mind that I will not be switching from using Google services like Health and my goal is not to maximize security, however I do prefer to choose the more secure option if possible.
Currently I am leaning towards switching to stock.
For My "Desktop" I use ChromeOS Flex.