Comment by Aissen

2 days ago

It's basically an additional policy on top your OS's policy, while waiting for the stores to update, it protects the users.

Or allows Google to override security. They could also trust a certificate here, maybe one owned by the regime.

  • There are links to pretty readable changesets, so you can go read and understand exactly what's happening instead of speculating.

  • you both pin your compiler version, and your binaries are compiled so it only affects going forwards