yes, graphene's playstore sandbox is good and but it's not optimal to get your apps from google whenever possible. here's a good flow for getting aps:
apk > f-droid (use f-droid basic for unattended updates) > google play store.
1password is not open source. i recommend bitwarden paid version (it's cloud based so depending on your threat model) and keepass. they are both rock solid open source password managers.
Ava
npub1f6…azcka
2024-01-20 04:42:55
in reply to nevent1q…ehk5
Author Public Key
npub1f6ugxyxkknket3kkdgu4k0fu74vmshawermkj8d06sz6jts9t4kslazckaPublished at
2024-01-20 04:42:55Event JSON
{
"id": "77ed0e63306368c6e139a01c7c6166500afa9a23934952518686a40ca776c97a",
"pubkey": "4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d",
"created_at": 1705722175,
"kind": 1,
"tags": [
[
"e",
"79381728191ff94c56e7a3d259c5daf3a7dd6fb01f2602638b3003b1bd253760",
"",
"root"
],
[
"p",
"4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d"
],
[
"p",
"43637a311a15f1c253b5d60778ab7544ac639b88e168e7224a900d4a41283183"
],
[
"p",
"b6e13999da09d9fb2bea6ddf5ac65693d66ffa43738e009aac6d547be5fd3c80"
]
],
"content": "yes, graphene's playstore sandbox is good and but it's not optimal to get your apps from google whenever possible. here's a good flow for getting aps: \n\napk \u003e f-droid (use f-droid basic for unattended updates) \u003e google play store. \n\n1password is not open source. i recommend bitwarden paid version (it's cloud based so depending on your threat model) and keepass. they are both rock solid open source password managers.",
"sig": "16f13e6cf507d7dd493fa644b6abe43cb75dd60478974c32f0b1bb1d3a519225df670c3ee99aa2f2a3fc2b5350048ed98432953a13a9e973a7450f93422e21f5"
}