Damn that’s some clusterfuck. My tinfoil senses are tingling. The part on addressing chrome only instead of webp… Seems like a good way for securing pegasus success and at the same time keep plausible deniability

Consumer fetishism

So any app that got the APK ,or your browser need permission to install. This can be removed afterwards. At least I think so I don’t use stock. But they must have removed the blanket 3rd party permissions right?

Also F-droid is not very good as an app since it targets android 5 or something. I use neo store.

Default on grapheneOS , took a bit to get used to but sooo much better and effective