os

DivestOS does not come with anything as DivestOS doesn't sell devices. Selling devices with outdated vendor firmware with known security issues would be immoral. However on select devices you can successfully relock the bootloader with DivestOS installed, as it is properly signed [0] and enables verity on supported devices. Other alternatives that support relocking are GrapheneOS [1], CalyxOS [2], #!OS [3], and RattlesnakeOS [4]. They too do not sell devices. [0] https://github.com/Divested-Mobile/DivestOS-Build/blob/maste... [1] https://grapheneos.org/ [2] https://calyxos.org/ [3] https://github.com/hashbang/os [4] https://github.com/dan-v/rattlesnakeos-stack

If you want google-free android with some privacy defaults you can build/sign yourself with a simple make command, see: https://github.com/hashbang/os

LineageOS has a tendancy to disable or break piles of vital security features very carefully architected by Google security researchers like verified boot. Google also maintains a release process designed to help mitigate supply chain attacks. LineageOS also deviates from AOSP sources enough that it often creates significant time delays before new security patches can be backported if they get backported at all. Sadly stock Google phones also violate your privacy and the privacy of those around you. Stock Android is not a great solution either. We can have it both ways! Check out https://github.com/hashbang/os