You’d need be able to relock the bootloader while allowing any properly signed OS to be installed, even custom ones. There’s a few phones that let you do this that aren’t Pixels but not really documented well. Apparently the bootloader relock is an advertised feature and not an oversight like other phones1.
That and google has the titan m2 chip so I’m assuming Motorola will incorporate something similar as well along with proper hardware support.2
If you want to have a cheap phone that runs a secure os securely, you’d need to build it (like Lineage os)and sign it yourself with your own keys.
And then with this you’d have to find a phone that supports lineage os, has an unlockable bootloader, has an unlockable bootloader that will let you use your own keys, and have the patience to build LOS yourself. I’ve tried this once and it’s hard.
My last Android phone was a moto e2 LTE running lineageos and I was running around with an unlocked bootloader. I was a teenager so no banking apps and nothing was really looking for root or bootloader state. This was a $40 smartphone in 2015 with 1 gb of ram. Anything was an improvement.
2: Im used to old Lenovo owned Motorola with ill supported phones. The aforementioned moto e2 lost support less than a year after launch (but that was more due the handover to Lenovo and that was a Google designed phone). A lot of their E line phones would get one version and then a new phone would drop with basically the same hardware. E4 and E5 were like that. The more expensive ones had a bit of improvement but not much more. Supposedly they want to get better with support but I won’t be surprised if that promise falls short.
You’d need be able to relock the bootloader while allowing any properly signed OS to be installed, even custom ones. There’s a few phones that let you do this that aren’t Pixels but not really documented well. Apparently the bootloader relock is an advertised feature and not an oversight like other phones1.
That and google has the titan m2 chip so I’m assuming Motorola will incorporate something similar as well along with proper hardware support.2
If you want to have a cheap phone that runs a secure os securely, you’d need to build it (like Lineage os)and sign it yourself with your own keys.
And then with this you’d have to find a phone that supports lineage os, has an unlockable bootloader, has an unlockable bootloader that will let you use your own keys, and have the patience to build LOS yourself. I’ve tried this once and it’s hard.
My last Android phone was a moto e2 LTE running lineageos and I was running around with an unlocked bootloader. I was a teenager so no banking apps and nothing was really looking for root or bootloader state. This was a $40 smartphone in 2015 with 1 gb of ram. Anything was an improvement.
1: Documented phones that had self signed copies of LineageOS are the Pixel 4, OnePlus 7 pro and OnePlus 8t. https://xdaforums.com/t/guide-re-locking-the-bootloader-on-the-oneplus-8t-with-a-self-signed-build-of-los-18-1.4259409/
2: Im used to old Lenovo owned Motorola with ill supported phones. The aforementioned moto e2 lost support less than a year after launch (but that was more due the handover to Lenovo and that was a Google designed phone). A lot of their E line phones would get one version and then a new phone would drop with basically the same hardware. E4 and E5 were like that. The more expensive ones had a bit of improvement but not much more. Supposedly they want to get better with support but I won’t be surprised if that promise falls short.