I finally tried GrapheneOS on my Pixel, and it's the secure Android alternative I've been waiting for

"If you've never heard of GrapheneOS, think of it as a privacy and security-focused mobile operating system that includes Android compatibility and is developed as a non-profit, open-source project. GrapheneOS, which began in 2014 as CopperheadOS, achieves its heightened security by way of sandboxing, exploit mitigations, and the Android permission model. This alternative mobile OS mitigates entire classes of vulnerabilities to make exploiting the OS exponentially more difficult."

"The OS improves on Android sandboxing with the help of both SELinux and seccomp-bpf policies, along with hardening of components like the kernel implementation of the app sandbox. You might think all of these security improvements and mitigation would get in the way of usability, but that is not the case. The development team behind GrapheneOS takes usability seriously, so the OS works well, without having to jump through a ton of hoops to make it so."

GrapheneOS is a privacy- and security-focused mobile operating system compatible with Android, developed as a non-profit open-source project. It began in 2014 as CopperheadOS and raises security through sandboxing, exploit mitigations, and the Android permission model. The OS mitigates entire classes of vulnerabilities, making exploitation exponentially more difficult. Sandboxing improvements include SELinux and seccomp-bpf policies plus hardening of components such as the kernel app sandbox. The project balances security with usability so the OS functions smoothly. Installation requires a supported Pixel 6–9 device, a Chromium-based browser, enabling OEM unlocking, booting into the bootloader, and using a web installer.

Read at ZDNET