Comment by josephcsible

5 days ago

The fact that GrapheneOS digitally signs their releases doesn't make them not open source. This is indeed a bad situation, but the badness is 100% the fault of Google for having a hardware attestation "feature".

If you can't build the release from the "source", it's not the Corresponding Source. Period, finito, end of story.