> may i ask how you obtain the source? Are you registered as an OEM at Google?

Same question, how does Graphene get patches?

They have partnership an OEM who provides them with sources.

Currently they're only permitted to release binaries of the patches due to the embargo, this is why these patches are in the parallel stream/optional (so people unhappy with being unable to see the sources won't have them shoved down their throats).

I don't have URLs at hand at the moment but all these questions have been asked many times and explained extensively on their discussion forum.

I, for one, feel safe. I was patched since late October (IIRC) for the vulnerabilities that Android-related outlets were warning about in early December.

It's quite surreal how unsafe the standard Android is. And how Google and the big companies pretend old devices (these running Android 11, 12, 13, not updated for several years) are safe and secure. While all it takes is the user stumbling upon one malicious we page or getting a WhatsApp message they won't even see.

Yes. They've parterned with an OEM. In fact, they are making an official GOS phone with that OEM.