What's the most secure, privacy respecting smartphone?

Answer: I don't know.

I don't currently use a cell phone because of significant security and privacy concerns, but i am in the market for an Android based phone nevertheless for a few compelling reasons. My search for a device that meets my criteria led me to the Mudita Kompakt, an interesting phone with an eye pleasing E-Ink display that runs a modified and neutered version of Android, the Brax3 from Rob Braxman which currently runs iodeOS, also a modified version of Android, and devices from Murena which run /e/OS, also Android based. All of the aforementioned devices run de-Googled operating systems, however, with the exception of the Pixels from Murena, all of them seem to suffer from a baseband and modem that isn't properly isolated from user space and that's a massive security and privacy concern. Then there's the non-Android devices, such as the PinePhone Pro which runs Linux, however the hardware isn't currently being further developed and it is in no way suitable as a primary daily driver due, in part, to piss-poor battery life. Then there's a couple of products from Purism, a rather controversial company which created PureOS, another Linux derivative, and which currently cost around $800 US for the 'cheap' model. Lastly, there's the WiPhone which, as the name might suggest, uses WiFi for calls which eliminates some of the security and privacy concerns that plague all cellular phones, however there's concerns with this company and the phone is ... WiFi only.

None of the above run the open-source GrapheneOS which seems to be the pinnacle of Android based operating systems regarding security and privacy. Graphene has a long list of security related hardware requirements which are apparently met only by the later Google Pixel devices. How's that for irony! One of the shittiest, most privacy invasive, unethical companies on the planet makes the best privacy-friendly phone in the public sector? That's an incredibly hard pill to swallow, but after reading up on GrapheneOS a little, i tend to trust the project and its goals, plus that dude in Russia recommended it. Even with a Graphene'd Pixel however, we still have the unavoidable problem of insecure, proprietary crap powering the baseband OS and modem, however at least these components seem to be properly isolated from user space via an IOMMU, whatever the hell that is. One of my initial requirements for a phone was a physical switch which would power off the radios, however with the Pixels and GrapheneOS this doesn't seem to be necessary; putting the phone in 'airplane' mode is apparently a reliable way kill the radios and prevent a 3rd party from re-powering these components without your knowledge ... apparently.

The phone is only half the problem however. Next is the service provider and, thus far, i've discovered only one that seems like it might be reasonably trustworthy and doesn't require a DNA sample and rectal exam before selling you service and that company is Cape. Cape is a very interesting company for a few reasons, one being their limited collection of personal information and the isolation of your account information from the actual cellular service as well as their no-contract model. Beyond that, Cape also owns some of the physical infrastructure of the network, excluding the cell towers of course, and this provides them with further opportunities to enhance security and privacy on the network. They also sell Pixels with GrapheneOS preinstalled and configured which is really convenient and buying one will knock $500 off your phone bill over 6 months which is good because, at $100/mo., Cape isn't cheap! One noteworthy issue with Cape is its founder, John Doyle, who previously worked for Palantir, another super-shitty, privacy invasive, unethical company plaguing the planet, however after listening to some interviews with Doyle, he seems to be genuinely concerned with customer privacy and security. Besides, not everyone who works for a shitty company is a shitty person, right?

So there you have it; a Google Pixel 8 or 9, or possibly the upcoming 10, GrapheneOS and Cape as the service provider. That's the most secure and privacy respecting combination i'm currently aware of. If you have another alternative, holler.