> Pretty much. Google Play services runs as like a root process that can (among other things) bypass all the security checks that the OS usually has.
Unnecessarily mind you, GrapheneOs proved that you can get the vast majority of GMS functionality without it needing to run as root.
Even Gpay would work if google allowed it.
> That includes those annoying update confirmation dialogs which make it impossible to install updates automatically without user interaction.
This has changed with android 12, third-party sources can now auto update an app after a user accepts the initial prompt go install it.
Unnecessarily mind you, GrapheneOs proved that you can get the vast majority of GMS functionality without it needing to run as root. Even Gpay would work if google allowed it.
> That includes those annoying update confirmation dialogs which make it impossible to install updates automatically without user interaction.
This has changed with android 12, third-party sources can now auto update an app after a user accepts the initial prompt go install it.