The GrapheneOS people are using CPU level hardware security functions provided by Qualcomm, I’m assuming the partnership means they get proper access to drivers and Motorola / Lenovo won’t be modifying the CPU.
Now there’s still plenty of room for shenanigans in other places like the modem and various interconnects and the motherboard and all that, but at least there’s some baseline security provided there using ARM secure boot and hardware level exploit protection in the CPU, etc.
The GrapheneOS people are using CPU level hardware security functions provided by Qualcomm, I’m assuming the partnership means they get proper access to drivers and Motorola / Lenovo won’t be modifying the CPU.
Now there’s still plenty of room for shenanigans in other places like the modem and various interconnects and the motherboard and all that, but at least there’s some baseline security provided there using ARM secure boot and hardware level exploit protection in the CPU, etc.