IGignoramous·Nov 14, 2020
> #1 things I want to control is app permissions.
Android AppManager [0] (if you're willing to spend the time configuring it via the command line) might help here.
> If an app "needs" my location, it should get a random spot in the world. If it "needs" my contacts, it should get an empty list.
Some Chinese OEMs do have these features. I know ColorOS (Oppo and Realme) does.
> If an app "needs" my network, it should see that it's offline.
Android 11 natively exposes ability to firewall apps individually. All major Chinese OEMs (Xiaomi, Oppo, Realme, OnePlus, Vivo) have supported this for a long time.
> The #2 thing I want to control is data going out.
There are two or three no-root firewall solutions on the PlayStore (disclaimer: I built one, too).
> #3 is having security updates forever, rather than sudden EOL with no notice.
Legacy device
Read the rest
s may have other problems than what an Android distribution can address: https://grapheneos.org/faq#legacy-devices
[0] https://github.com/MuntashirAkon/AppManager