I just don't buy this take. There's so much code; how can you be certain it will face sufficient scrutiny just by virtue of being available?

This is a valid criticism.

Upstream being AOSP helps a lot.

you cannot be certain, but at least the code has the chance to be publicly scrutinized. This is not the case at all with google binaries, so you have a net, objective gain.

Well, Calyx keeps the basic security model of Android intact (verified boot), unlike Lineage.

Custom verified boot needs to be supported in hardware. But with most devices, you can use "fastboot boot" from an external device to start from an image that you trust.

Note: You can only do this when the bootloader is unlocked.

When it's locked (which is the entire point of custom verified boot), this is not allowed.

Indeed, but in return it only supports pixel phones, sadly (considering they're not great value for money for custom rom purposes, and most of their added value is lost when running a custom rom)

> considering they're not great value for money for custom rom purposes

I pay $120-$350 for used Pixels.

What I guess I'm trying to say is: Huh?

> most of their added value is lost when running a custom rom

Could you please explain?

Well, Google packages the pixel phones with their latest OS updates and pixel specific features like Gcam. By running a custom ROM you lose those. Its cameras mainly perform so well because of the big AI farms at Google.

Google Camera works just fine, entirely offline as well.

You do miss out on some other pixel-specific features (Hold for Me for example), but camera quality should be unaffected.

Pixel cameras are great, regardless of what app used.