That brings about two problems for me. How about phones with locked bootloaders? And the reverse of that, is how do you keep phones with unlocked bootloaders from getting poison-pilled into the supply chain? IE from someone buying a pallet of phones flashing malware infected firmware and just returning it back to the warehouse for the populace at large to use. And some stuff you just can’t degoogle, at least not without a bunch of patching or just straight breaking functionality like what happens in trying to switch to say GrapheneOS (One of the best supported Alt Android distros I have seen) where notifications for most apps don’t work unless you patch back in a lite version of google apps or patch the app to use different protocols, and many apps expecting a “secure” (Google filled) environment will just not run again without patching.