I also think the DivestOS project is pretty cool, as I use Mull daily and maintain my own custom addon collection from the time when Firefox didnt allow all installs. (I really have to clean that list up though, it has too many things).

Will look into it.

My knowledge is too that even "ungoogled Chromium" may not send data (so it doesnt have active antifeatures) but it is still not fingerprint protected.

Brave meanwhile is veeery bloated with weird stuff, which totally tells me that their focus cannot be that much on the privacy and security hardening.

Regarding Arkenfox, I maintain a small and pretty messy project to make it usable for daily usage changing only small bits.

I dont know percentages, but I remember most of it being one of these

• "remove everything Mozilla"
• remove actual tracking stuff
• privacy hardening that may break sites
• security hardening

So it is not mainly a security project but mainly privacy hardening to my knowledge. I agree with it mostly though, it is a great project.

Chromium has some flags and policies which are very limited though. The secureblue project has integrated all of them, and its still way worse than Arkenfox for privacy. There are JIT Exceptions though, not sure if this is available on Firefox, it was very hidden also for Chromium.

I also agree that manifest v3 is central Google control dystopia.

I have to say though

While DivestOS includes a Gecko based browser for privacy reasons, Chromium based browsers have many security advantages.

This makes little sense. If a Browser is not as secure as possible, it is not as private as possible. At least if you scale it. "The browser is like pretty secure, not the best available but okay, unless you are not targeted or something". What statement is that? We dont know if we are targeted.

So I appreciate if people say "this may not be the best for privacy, but we use the most secure base and try to make it privacy friendly" just like I respect people making hardened Firefox more secure.

Anti-fingerprinting on Android is very difficult because of GPU models, display size etc. According to GrapheneOS, Vanadium sends as little data as possible. And I believe them that. Not sure about other vectors of privacy, the lack of NoScript (granular JS control per origin) and UBO makes it unusable for me, along with strange UI for adding search engines or whitelisting cookies while whiping the others.