"I can't be bothered to verify Pop_OS so I'll trust macOS, which is IMPOSSIBLE for me to verify."
How is code written behind closed doors by a closed, for-profit company more trustworthy than open source code?
There is always the reasonable doubt, whether it's closed or open, but it's much easier to do nefarious or just _unspoken_ things when nobody except employees under NDAs have access to the source code.
The reason you trust Apple more than Pop_OS is simply because you've decided to have pretty much blind faith in their marketing content and PR speak. That's not to say Apple acts in bad faith necessarily, but blind trust in a blackbox doesn't make for great opsec.
Even if I switch macOS for open source alternatives I still have to rely on closed source software for important parts. And let’s be honest: It’s almost impossible to recreate Apple’s ecosystem with open source components. It’s even harder with iOS. I could switch to Android or sone obscure alternative operating software where I don’t even know if if’s still there next year.
My problem is: Where do I put the line? When I install Linux, should I still use Spotify, Steam and Reddit? No, because none of them are open source? Can I still use Google services? YouTube, search, mail? No? DuckDuckGo? But how do I know they're not invading my privacy? Do I have to use an open source email provider? Is that even a thing? Should I install a VPN? Do I constantly have to use Tor? Do I need to live boot Tails from my USB stick so I my usage can't be tracked and buy a prepaid Nokia 3210 that I put into a metal bag when I don't use it? And even if I go all the way down the rabbit hole: How do I know that my hardware isn't compromised? And do I constantly have to revaluate my privacy choices because one component of them could be compromised? What kind of life would that be?
Personally, in order of preference I choose to go without, find a FOSS alternative or give in and install an app. That means I don't do too much with my phone. I run Lineage with microg, I don't use any google, apple or facebook services. I store my music on the device. I backup photos to pcloud. I will watch youtube in the browser. I have my banking app installed. I use SMS to message people, or matrix if I can.
It's not perfect by any means, but it's the best comprimise I've been able to come up with.
Yet your location is easily tracked because of GSM signal. Also banking app on phone is very questionable about privacy.
But hey, beeing free from big tech is very liberating. No distraction or social engineering through algorithm in feeds. But unfortunately you'll find out how hard it is to find what is going on around in your city, country... If you stay at home.
"I can't be bothered to verify Pop_OS so I'll trust macOS, which is IMPOSSIBLE for me to verify."
How is code written behind closed doors by a closed, for-profit company more trustworthy than open source code?
There is always the reasonable doubt, whether it's closed or open, but it's much easier to do nefarious or just _unspoken_ things when nobody except employees under NDAs have access to the source code.
The reason you trust Apple more than Pop_OS is simply because you've decided to have pretty much blind faith in their marketing content and PR speak. That's not to say Apple acts in bad faith necessarily, but blind trust in a blackbox doesn't make for great opsec.