I can see how one can interpret it like that, but it’s not how I read what he said. I think the point he’s trying to make is that hardened security protects the user from attacks, yes, but their focus is to provide services that can be trusted not to attack the user. He said: “really hardened security stuff that could clearly be useful for executives, in the secret service, or whatever. That’s not our goal”

I mean, I use GrapheneOS on my phone, but do I personally need all the hardened security? Not really. It’s nice theoretically, but mainly I’m just happy the OS itself isn’t spying on me. I’m personally not very worried about an evil maid attack or state level spying.