H
hisar

  • Joined Feb 11, 2023
  • andrewteg

    Without going into too much detail, the main difference is how much privileged access Google has to your phone.

    On Stock, Google Mobile Services (GMS) apps that are included in the factory image have system-level privileges. If you look at many of GMS apps' permissions, they have virtually unlimited access to everything on your phone, including access to read all your files, change your settings, install other apps, log some aspects of your app usage, etc.

    Armed with that info, I think it's best to read this section on the website to know more about how Google Play apps work on GrapheneOS: https://grapheneos.org/features#sandboxed-google-play

    A tl;dr of that page is GrapheneOS works without Google Mobile Services (GMS) apps. They're all restricted to the same app sandbox as other apps and have no special permissions.

  • hisar GrapheneOS Camera was recently added to the list of mandatory system components. That's because the OS uses GrapheneOS for media capture intents, and users have been disabling it without realizing it can break things. If you really want to disable the app, you can still do so via ADB.

    https://grapheneos.org/releases#2023012500

    Edit: Similarly, you can't disable the GrapheneOS Keyboard app but you can disable it as an on-screen keyboard, so it won't appear in the keyboard switcher menu. Go to Settings > Languages and input > On-screen keyboard