That’s how Shawn Wilden, the tech lead for hardware-backed security in Android, described the current reality of custom Android-based operating systems in response to a real security conundrum.

Efforts like Graphene OS face increasing pressure from apps that refuse to run on non-standard Android. The custom ROM project characterizes Google’s approach to device attestation as incomplete and ...