We would continue by backporting fixes ourselves as we have done now or making our own continued or separate OS security work regardless of the stress. We have large funding to build stepping stones on what needs to be replaced.
We aren't willing to commit onto anything else because that means we are just distributing a product we claim is secure but actually isn't. We have been extremely vocal about scam products and it would be a hypocrite move for us to move to that. There would be a guilt in our consciousness.
Our roadmap had always been in the far future to leave the Linux kernel behind. It is a liability to the security of GrapheneOS far more than anything else. We have a lot of kernel hardening work and our hardened memory allocator can be bundled into Linux kernel operating systems. It isn't our fault it isn't adopted in anywhere but our OS and secureblue. Ones that previously did ended up removing it out of preference or justified it through misguided beliefs. There is a deep anti-security culture in that space.
