- No Root
- No Bootlocker unlock
- No Custom ROM
- Needs Google Play Service
- Needs to be installed via Google PLay Store
- Needs my phone number
- Needs that SIM in that phone
- Needs that SIM in that slot
- Needs location
- Works only via Mobile Data
- Developer options disabled
- Needs someother app to be uninstalled
- Disable VPN (Firewall apps use that)
So for bank stuff to need a seperate phone, other for whatsapp (and other spyware) and then your main thing. And when you go out people ask questions.
I don’t understand my apps are developed with their security dependent of the OS, why can’t they make secure apps


Because the priority is not making secure apps, the priority is not being responsible for security incidents. The lawyers at the company making shitty apps (e.g.: your bank) want to be able to say “We followed industry best practices, which is whatever Google said to do”.
That being said: root, unlocked bootloader, and custom ROMs can all be big security problems. But if your bank’s app will not work on GrapheneOS, your bank just sucks.