Ghoelian

So it’s only the cups-browsed service. I wonder if that’s enabled on any distros by default. Will have to check mine tomorrow.

An exploited app can do more on a system that has more capabilities, simple as that.

A Linux distro made for mobile devices? Like Plasma mobile, or Ubuntu touch, or Sailfish os

Well yeah, because grapheneos is specifically made for security, not customiseability. Rooting your phone makes it a lot less secure, so it doesn’t seem strange to me that grapheneos doesn’t want you to.