I go back to the Nokia 2100
-
Some time ago the issue of applications that could access the "root" of an Android device without user permission was exposed, and it has also been in the news for sending data and statistics to databases in China, the [storage of records by Apple](lhttp://www.applesfera.com/ios/tu-historial-de-llamadas-se-almacena-en-icloud-sin-tu-permiso-pero-hay-una-explicacion-para-ello without the user's knowledge... not a very promising scenario for lovers of transparency.
In fact, a few months ago there was some company that considered bringing production from China to its country, (exactly "that" company and to "that" country)... but apparently they can't throw the first stone either.
According to what has been revealed, BLU, (which I didn't even know) a company that manufactures smartphones in US territory, is one of the accused of installing a backdoor with the ability to hide itself..
The number of terminals affected by said firmware reaches three million, and that's just with that "gift"; if you include all devices affected by similar exploits, whether by the manufacturer's account or by the skill of a group of (¿computer scientists?) bored; I don't think many would be left unscathed.This is already taking on a sinister character, and perhaps it is those weaknesses of Android or the Linux kernel used for it, that is driving the development of new OS, such as Google's Fuchsia or KasperskyOS of... well, I can't remember now.

Meanwhile, I'm going to dust off a Nokia 2100 that I have lying around.
-
I don't know the technical details of the malware they have included in the mobiles but the problem goes beyond the operating system that is used. The Linux code is open but that doesn't give any guarantee that a Linux system can be free of malware. I'm not talking about it being able to be infected but about it being distributed infected.
A very cool manufacturer can sell its terminals and publish next to it the source code of all the software that comes standard so that anyone can audit it. The problem is that this software comes compiled on the phone and the compiled firmware could come from another source. Checking if a compiled program comes from a specific source code is not at all easy since the result depends on the hardware and software installed where the compilation is performed. Debian is working on this aspect.
I say this because the fact that now other operating systems appear that are supposedly more secure implies absolutely nothing. The only way to have a 100% reliable system is for us to download the source code of each program that we are going to install, audit it ourselves, compile it and then install it.
While the traffic of personal data continues to be such a profitable business, our privacy will depend only on the good faith (and diligence) of the manufacturers who foist their precompiled software on us.
And well, here comes into play once again the attitude of the consumers. The authentic reality is that the vast majority couldn't care less about this issue and that makes it very unlikely that anything will change.