How secure are unofficial Android versions?

[mech-eng]

TL;DR Summary

I would like to ask about Android versions developed by developers.

Hello. Would you please explain how secure are unofficial Android versions. I called them "unofficial" but I don't know the terminology. Android devices come with an Android version. Android OS frequently updates, having a higher number. So I guess the devices can be updated for some years but then the devices' producers stop supporting them hence they became quite old. Then developers take into action. They develop the OS for the old device. Some of those "developed" operating systems even does use a different name such as Lineage OS.

I wonder about how secure the use of such Android versions for tablets and smart phones. I might use one in the future.

Thanks and regards,

 

[Wrichik Basu]

Android is an open-source project, and hence anybody can create their own OEM upon the Android base. Big companies can develop their own OEM, just as "small" developers. And these OEMs are the same from the security point of view because any security patches are applied to the Android base itself rather than a particular OEM, and hence, if the developers or companies are still providing updates, these patches are propagated to the devices.

If you install a well-known open-source Android OEM on your device, there will be no trust issues.

 

[mech-eng]

If you install a well-known open-source Android OEM on your device, there will be no trust issues.

How can I distinguish a well-known and secure one from a dangerous one, which is prepared by a person or company with bad intentions?

 

[Wrichik Basu]

How can I distinguish a well-known and secure one from a dangerous one, which is prepared by a person or company with bad intentions?

You have Google, right?

 

[anorlunda]

How can I distinguish a well-known and secure one from a dangerous one, which is prepared by a person or company with bad intentions?

Your questions focus on the thing, the what. Instead, focus on who you should trust and who not trust.

An unofficial anything means that you don't know who it came from.

 

[mech-eng]

Your questions focus on the thing, the what. Instead, focus on who you should trust and who not trust.

An unofficial anything means that you don't know who it came from.

But isn't that quite difficult? At least for me it is so. How would you understand whether they are secure or not from this page?

https://forum.xda-developers.com/f/galaxy-note-10-1-2014-edition-android-developmen.2504/

 

[berkeman]

Restarting a locked thread/subject is not allowed. This similar thread is closed as well. We do not discuss illegal software at PF.