This is why I like GrapheneOS on phone. It is hardened and secure, but never gets in the way of your work. Everything works as it should. Kicksecure is the closest on the desktop space, though Fedora is also reasonably secure.

They are doing a good job, but GrapheneOS exceeds in quality of the implementation.

For example, sandboxed Google Play runs actual version signed by Google but with no system level access. All other forks either runs Google Play at system level or runs a spoofed version breaking security model of Android.

It’s really impressive what GrapheneOS is doing. With a such a small team, they are able to push so many features that just works. I think average consumer does not realize the value of this project. With constant surveillance of Apple and Google, GrapheneOS is the only high quality alternative we have. Whoever reads this, please use GrapheneOS and donate if possible.

That explains why MullvadVPN keeps disconnecting on Android.