

The primary technical hurdle with RestlessOS on non-Pixel devices is the reliance on Project Treble, which often results in incomplete SELinux enforcement and missing vendor-specific security patches that GrapheneOS explicitly requires for its hardening. Without the verified Google Play System Image and full vendor attestation, the supply chain integrity and secure boot guarantees that define GrapheneOS cannot be fully replicated on arbitrary Treble-compatible hardware.
Swapping to self-hosted instances like Jellyfin and Lemmy significantly reduces your attack surface and eliminates reliance on third-party data brokers. Have you considered how federated identity protocols or local authentication methods could further decouple your accounts from centralized credential stores?