Looks like they put in a ton of effort to make this compatible with generic devices, but I have to ask, with all the features removed, why choose this over any other ROM?

Features removed

hardened_malloc — causes boot loops on devices with 39-bit virtual address space. replaced with AOSP Scudo.

Auditor — requires hardware attestation which > doesn't work on GSI

mtectrl / misctrl — Pixel-specific memory tagging control; breaks vendor TEE drivers

USB protection — the low-level USB port controls rely on Pixel-specific hardware and are non-functional on other devices

native debugging protection — not ported; breaks compatibility with root solutions and vendor debugging tools

Features disabled by default

These can be re-enabled in TrebleApp → Hardening or Settings → Exploit protection.

MTE/TBI for vendor processes — memory tagging breaks some vendor drivers

hardened thread stacks — non-standard memory layout breaks some vendor drivers

secure (exec-based) app spawning — breaks root solutions (Magisk / KernelSU)

Best we can do is paid leave

Rocky and Alma Linux are both Red Hat Enterprise Linux

Assuming your bank already has all of your information, what's the problem with them knowing your IP?

And how often do you need to use your banking app? Could you connect from a local free WiFi network from a library or something?

What about just logging in with your web browser? I've been using GOS for going on 4 years now and haven't had any issues with it. Is there anything specific the app provides that you need that isn't available through browser?

There's also SeaweedFS that I've used as an S3 compatible fileserver