People are trading the future of personal computing just so they can run a banking app and justify it with "but I want my phone to be locked down for security." Not even sleepwalking into corporate-controlled-computing, but actively promoting it.

10, 15 years from now the ability to run your own code will be a distant memory unless you constantly subscribe to an annual Developer Account with BigCorp. Oh no, you've coded something that violates the ToS; account terminated.

▲

ragequittah 3 hours ago | parent | next [-]

Such a wild take to me. I install an entirely different operating system on my phone (graphene) which also advises me not to root because it's stupidly unsafe to do so. I also don't log in as root on linux, nor do I log in as an administrator in windows. None of these are sane practices to anyone worried about security.

▲

prmoustache 2 hours ago | parent [-]

To be honest this matter more on graphene than on linux or windows because of the sandboxing of all apps by default.

On Linux and Windows it doesn't make a huge difference to be admin or not on a single user system. If you have a process on windows running with your user rights it can access all your data, which means game over already. Same on Linux if you aren't using heavily sandboxed flatpaks or do not run all your apps inside jails using tools like landrun or firejail.

▲

ragequittah an hour ago | parent [-]

There's a reason why enterprises don't give you an admin account on Windows. Sure damage can still be done, but the blast radius is highly reduced. It was like the first rule I learned about Linux back in the day: don't ever log in as root, don't even bother enabling it. Hell it's not even a good idea to do it on an offline computer cuz you might accidentally bork something yourself. The barrier of at least a password to install system level software or delete critical files is a good one to have.

	▲	prmoustache 32 minutes ago \| parent [-]
		It only limits the blast radius on multiusers systems or when people do not follow basic security measures like having a different password on each computer. I agree it is a good one to avoid breaking the system yourself too easily but that is only if you don't blindly copy paste commands with sudo. The only thing it mitigates really is how easy a malware can hide in the system once already present. But as said earlier once running under your username it is game over, your data is right here ready to be stolen, compromised, altered, destroyed or encrypted.

▲

Gigachad 2 hours ago | parent | prev [-]

I have plenty of devices like raspberry pi’s and handheld Linux gaming devices that allow free unlimited access. My phone is the one thing I want fully secured because it’s where all my most important data and keys are.