Android 16's enhanced Advanced Protection will let apps know when you're serious about security
Android 16 is adding an API that lets apps check if the user has enrolled in Advanced Protection, thereby enabling extra security features.
I've really got mixed feelings about this feature to the point where I can't see myself using this. Firstly, security should be built-in through the use of good design choices, not added via some toggle. But sure, let's consider a toggle that improves security. Why is this getting confused with sideloading? Why should apps have this visibility into my settings?
Overall, the idea stikes me as half-baked and trying to serve too many sometimes conflicting interests.
It's part of a worrying trend which seems like Google is trying to hyperconsolidate Android. Apps can already check if a device is running genuine original firmware, which means a lot of banking apps don't play well with third party firmware is like grapheneos. It should be none of the apps fucking business what OS I am running. But by giving developers the ability to check this stuff, they can wash their hands of it and complain they aren't forcing anybody to run anything it's those darn app developers.
So, this "advanced protection" mode prevents me from installing apps from non-PlayStore sources and developers could design their app in a way that requires this mode? So if someone is reliant on a single app requiring this mode then they would essentially have to get rid of all "unwanted" apps? Why do I think this "advanced protection" isn't actually intended to protecting the user?
I really hope these checks can be circumvented, but even more that this will get them some EU lawsuits.
Yeah apps should not prevent you from running them in enviroments they dont want to be run in. A law like this would fix stupid banking apps and other things as well.
Yup. I hate to admit it, but the only reason why I'm currently running a custom firmware again is because my current banking app plays well with GrapheneOS. Otherwise I'd probably not bother. Being able to use a banking app is just too convenient (for me personally).
Instead of forcing developers to make more reliable applications, Google will leak this status (privacy invasive IMHO) and developers will use it to block features.
Am I wrong somewhere?
No, that sounds accurate. Basically "Advanced protection" puts security in Google's hands, and therefore is irrelevant to people worried about Google being the security risk...
Advanced protection
blocks side loading
disables installing apps from outside the Google Play Store
— so to me, running a degoogled Android device it is not just useless but actively harmful to the security of future apps that may become overreliant on this monopolist framework.
Correct