Is Android webview in e/OS 4.2 insecure?

this thread made me remember: if updates are delayed, installing an alternative webview is a workaround.
It works because Googles signing keys for those webview packages are trusted in upstream LOS - and it doesn’t get overwritten.
/e/OS could indeed add a few more pubkeys for flexibility (as asked here, even if, sadly due to tragedy, aosmium itself is now defunct).

4 Likes