Comment by Cider9986

It wouldn't be worse than those but with AI, AOSP is patching way more vulnerabilities than before and people without technical skill can abuse vulnerabilities, and those with skill can abuse them even more. It simply is not wise to run out-of-date GrapheneOS.

I'm curious how many months/years before out-of-date GrapheneOS becomes the worse option security wise compared to various brands' stock Androids. Obviously it is nuanced and there's no clean answer but it would be interesting on average.

We could think of metrics in public patches, but GrapheneOS has exploit protections that prevent against 0-days which would be hard to factor in.