> At least with the standard Google Pixel images, I have some degree of assurance from Google's robust source management and security infrastructure. The bar for backdooring an official Google product is much higher than the bar for backdooring a hobbyist project.

google hasn't posted a new image or ota for pixel 6(pro) since november. last i read it was held up by some breakage of the google assistant.

i don't know how much patching gets done via google play, but this seems really disappointing. no rces but loads of eops which now means the phone is only as secure as the weakest app supply chain?