There is also a version of AdGuard DNS that is cloud-hosted and allows you to choose blocklists and all that kind of stuff. It’s like NextDNS. It’s essentially AdGuard Home but they host it for you (The concept is the same, but there are some differences and the interface is different). It’s relatively new, I tried it, I prefer NextDNS.
When they do this, I just laugh at them and tell them them to stop pretending. Is this rude? Maybe. Is it the truth? Definitely.
Edit: It’s not just banks. Insurance companies and publicly traded corporation in general are just there to screw you over. I’m not a socialist or anything like that but I gotta say: The capitalist system is flawed. (Every system is flawed, a perfect system doesn’t exist but it’s pretty bad with capitalism)
As I said, I don’t do banking on my phone, but if I needed to use a banking app and it was unsupported on GrapheneOS I would honestly consider switching to another bank. The system of banking is flawed as well, that’s why I try to use Monero as much as possible.
Right, SafetyNet. I haven‘t tried banking apps (or anything else that requires SafetyNet) with microG, but SafetyNet is just a flawed system in general. Even on GrapheneOS, with the proprietary Google services running in a sandbox, only SafetyNet basic integrity can be achieved, because the OS needs to specifically be whitelisted by Google order to get full integrity. It‘s a ridiculous monopolistic move by Google. I just never use banking apps on my phone, I have a dedicated small and light laptop only for banking, that I can also take on a trip if I need to do anything related to banking on the go. I do this for extra security, so my banking is separated from all my other digital activities, but I‘ve heard that basic SafetyNet integrity that be achieved on GrapheneOS is enough for many banking apps.
I haven’t tried microG on DivestOS yet, but from my experience on CalyxOS (before I switched to GrapheneOS) I can tell that it works really well. Doesn’t really matter whether it’s officialy supported, you can just install it yourself.
Sure, but DivestOS is better for old devices as it supports bootloader relocking and it’s just much better for both privacy and security. If you want the most secure mobile OS on a modern sevice, go for GrapheneOS on a Google Pixel (which also has hardware security with the Titan M2 secure element).