That's because the article that started the whole argument tried very hard to present an expected behavior for embedded chips as a security hole.
pelya
Fingerprinting fear is eh. The server only receives what the browser sends to it, plus your IP address. The browser fully controls what it sends, and it only sends identifying data because advertisement companies pay browser vendors to add this data. There is no technical reason why fingerprinting is even possible. Everything - your OS version, your cookies, your mouse movement - can be faked or anonymozed.
All that's going to achieve is that every browser on the planet will identify itself as Chrome in the user-agent string.
Linux desktop on Android have been attempted many times with variable success, and it goes way beyond command line, see UserLAnd
It brings all Linux desktop apps to your phone, and all you need is Bluetooth mouse.
Do you need to edit an audio file? Try looking on Play Store, every audio editor has ads and subscription and offers only cropping and equalizer. But what if you need cross-fade? Open your Linux VM - bam! Audacity
! All the audio editing tools you can ever need, and ten times more that you'll never use!
Do you need to make a meme? Go download some shitty meme maker from Play Store, that will only let you add text to ten preset images. Or get a photo editor that has twenty sepia effects but won't let you combine two images. But a simple sudo apt-get install gimp
command in your Linux VM, and you get a pixel-perfect image editor with transparency support, layer support, and a thousand brushes, and you can even plug a graphics tablet into your Android tablet and have stylus pressure making brush strokes of different width, or just use an Android tablet with stylus support, the pressure works there too.
Do you want some more esoteric thing like sqlite3 database viewer? Well, Linux VM is your only choice.
It becomes even more important if you want to buy a cheap Android tablet and ise it as a kiosk for some business. Run the backend server on your Linux VM, run the frontend in the Android web browser, and you don't need to buy an expensive POS terminal.
Nope. You'll only know how good is it when you run it on the actual hardware. Yeah you can install apps on Android emulator, but what makes or breaks custom ROM is driver support on actual hardware.
Should have used three spreadsheets. Excel tends to run slowly when a spreadsheet has more than a million cells in it.
There was no mention of over-the-air exploit, so eh.
Anyway, having direct unprivileged R/W access to platform memory is indeed a security hole, no matter the vendor.
It is not. ESP32 is an embedded chip with less than one megabyte of RAM. It cannot run apps or load websites with any malicious code, it only runs the firmware that you flash on it, nothing else, and of course your firmware has full access to every chip feature. If your firmware has a security hole, it's not the chip's fault.
My bad, I was talking about custom tabs, which are provided by Chrome or Firefox.
WebView is a separate app, and you can switch between WebView and custom tabs somewhere in system settings.
The browser is what provides the WebView in the first place, so yes.
No Wayland forwarding support.