Pixel 2 and Unlocking the Bootloader Question?

[diesteldorf]

Jerry has posted a lot of good security articles recently, so I am hoping he weighs in on this.

Currently, I am using a Pixel XL. The bootloader is unlocked, but I am unrooted, running the latest security update, and a custom kernel (FRANKO) and recovery (TWRP)

I have a wide collection of apps. 90% come directly from the Play Store/Amazon. The other 10% are either discontinued, not normally available in the USA, or come from other trusted app stores. Since the apps are already configured with my data, I like to use Titanium Backup whenever I setup a new phone, since it makes transferring apps easy, while also keeping the app data. Once that's done, I'll normally unroot the phone.

The custom kernel allows me to tweak battery life, but mainly allows me to use Android Pay, since it won't normally work with an unlocked bootloader.

I also like the ability to download and install my own updates, at my leisure. Of course, when you are running a custom recovery, automatic updates will normally fail anyway.

Question 1: Even if you don't plan on rooting, will you unlock your bootloader?

Since unlocking or relocking your bootloader wipes all internal storage, I always unlock it before I setup the phone.

Question 2: Provided you keep your security updates up to date, have lock screen pin and fingerprint, and download material from trusted sources, are you still engaging in risky behavior, if your bootloader is unlocked?

Right now, I am waiting for my Pixel 2 XL 128 GB Just Black, so I am anxious for anyone that wishes to opine.

In a few days, I'll have to make my own informed decision.

 

[recDNA]

I don't trust any source of apps besides the playstore but even that has contained some bad info stealing apps. There is no way to avoid all risks so it comes down to comfort. I would not be comfortable with any apps from sources other than the playstore. I would not be comfortable with any custom kernel. I have no way of knowing what is in there nor what may have been added at some poi t before I download it. I would not be comfortable with an unlocked bootloader.

I used to root and I shudder to think of all the strangers from all the countries who could have written malware into the roms I blissfully blew through one after another.

That said as far as I know nobody did anything bad with my info and I have been put at greater risk by Equifax leak.

Now I use Malwarebytes on locked up stock phone. It makes me feel a little safer...but nobody is safe.