Why are you so sure? Not everybody shares vulnerabilities with the world. Some people keep them for themselves or sell on the black market. I doubt OnePlus offer a reasonable payment for that.
Because it's not a high target device. Valuable targets are not using outdated OnePlus devices. There might not be money to be made, but there is reputation to be earned by discovering a new vulnerability. I doubt a vulnerability in some old 6T hardware would be worth much, while disclosing it and padding a resume would be.
People who use non-mainstream systems and rely very little on proprietary software are automatically more interesting. They may have something to hide.
I think that's a massive case of confirmation bias and exaggeration. People that use GrapheneOS are significantly, substantially more of a target than someone using a librem out of principle.
I don't think you have much of a point at all, but I also don't see this discussion going anywhere interesting so I'll leave it at that.
> People that use GrapheneOS are significantly, substantially more of a target than someone using a librem out of principle.
I don't dispute that. However, if you take into account that Google (who create Pixel devices) is a part of Prism, GrapheneOS users could likely be targeted in another way.
You've made that vague claim a number of times before, and unless I steelman it into being merely handwavy, it comes across as pure FUD. I don't even know where to begin.
But next year GrapheneOS will be releasing an OEM phone.
Why are you so sure? Not everybody shares vulnerabilities with the world. Some people keep them for themselves or sell on the black market. I doubt OnePlus offer a reasonable payment for that.