> <@EV-9600:matrix.org> I am talking about this scenario:
> 
> I installed GrapheneOS on my phone.
> Someone steels it and installs his own pre-built GrapheneOS version with a backdoor
> Now said thief returns phone to me, compromised

How would they know where you live and that it's your phone?