could potentially lose certification of the entire android ecosystem
Certification by whom?
The Netflix app is older (2011) than Safetynet (2014?). Google probably didn't need to provide remote attestation, but making non-Google Android unusable for most people is good for their bottom line.
Mobile check deposit is the only thing I want from my bank's app.
I'm running LineageOS with Magisk and Play Integrity Fix. That works for my bank's app, but I'm annoyed that they make me do it and gave their app a 1-star review on Google Play for it.
Musk: starts allowing Nazi shit on Xitter
Advertiisers: Hey, we don't like Nazi shit. We might stop advertising if that keeps happening.
Musk: Go fuck yourself. Is that clear? I hope it is.
Advertisers: stop doing business with the guy who told them to go fuck themselves
They gave one of those to fucking Henry Kissinger. It clearly doesn't mean what you think it means, if it has any meaning at all.
~~Telegram isn't open source, so I don't think you're going to find forks of it.~~
I stand corrected. Telegram's client is open source (GPL) and what OP is asking for is reasonable.
Has anyone you talk to regularly asked you to install a specific messaging app? If so, do you actually see a downside to installing it?
If you want actual help with these issues, try the GrapheneOS forum.
I’ve found gos extremely frustrating
Some parts of this are probably unavoidable. High-security systems tend to be inconvenient, and using a non-mainstream operating system often means limited third-party support.
I’m facing the nearly insurmountable task of convincing my friends, family, and colleagues to download and use signal when they are all using encrypted iMessage.
For reasons I can't figure out, it seems Americans hate the idea of installing any third-party messaging apps. Most Europeans I know have at least two.
Most of my banking apps just simply do not work.
There's some information on the GrahpeneOS forum, but if the bank insists on using Google's device attestation, you may not be able to do much other than raise hell with customer service (please do this).
This is one of the reasons I run LineageOS rooted with Magisk; there's a bypass for Google attestation. That, of course does not have the same security-first goals as GrapheneOS.
Holding down on the space bar to move the text cursor between characters.
This feature exists on some Android keyboards including AOSP keyboard and Heliboard, which are open source.
The benefit to longevity from limiting battery charge even a little bit is pretty substantial. I recommend it to most people with the technical ability to do it.
exposing myself to vulnerability
Everyone's security and convenience/feature needs are different of course. There is often a tradeoff. The way I see it, I wouldn't give up having admin access on my PC for security, so why would I give it up on my phone?
Yes. There's the occasional app it won't back up and restore correctly (Signal is a big one; use its own chat backup feature), but overall it's great.
What would have happened if Google never created an attestation system for Android? Would Netflix give up such a large market?
Netflix can downgrade Chinese phones that aren't common in the west and third-party ROMs because those represent a tiny fraction of their potential customer base. I doubt they'd be inclined to do so for all of Android.