No inherent reason all that stuff can't work on an open platform. It works just fine on my Linux box with yubikeys, fido2, and smart cards. Gcloud even let's you authenticate with them only to put a medium lived token in plaintext into a sqlite file on disk.

On average, people spend 4 hours and 37 minutes on their phone, per day [1].

I find it hard to believe someone would spend 4 hours and 9 minutes _per day_ looking at their banking app or using NFC payments.

[1] https://explodingtopics.com/blog/smartphone-usage-stats

Web browsing (like right now), photos, e-books, lots of messaging, music, sometimes video.

I use NFC payments often, but I wouldn't say that amounts to more than a few percent of my total usage.

Everyone uses their phones differently, of course. I don't think your use is unbelievable or odd, but I do think your use patterns are not the common case.

I used my bank app yesterday, but since then I've used:

whatsapp, phone, push authenticator, safari (having followed a link from a message), spotify, slack, mail, calandar, disney plus and camera

Do you not do any of that on a mobile device?

No one even brought that up. We're discussing being able to install unsigned/self signed APKs. Please stay on topic and take your strawman elsewhere.

I use GrapheneOS with the Dutch ASN banking app and the ICS credit card app. Pretty much all other major Dutch banks work as well.

https://privsec.dev/posts/android/banking-applications-compa...

Google Pay does not work, but some other NFC payment apps do (e.g. Curve).

[citation needed]

I run GrapheneOS and use several US-based banking apps. I'll not name them since I don't really want my HN account associated with my financials in any way, but I've got a mix of well-known national bank apps and smaller local credit union apps working.

I'll admit there is a single institution's app I've found that doesn't work, but that is just one of several that I use.

If you really don't have an alternative in Europe, buy the cheapest Googled Android device (less than $100 or euros), and use that as a glorified 2FA device. It's not ideal because you have to pay for it, but on the other hand Android devices with unlockable bootloaders (mostly Google Pixels now) tend to be cheaper than iThings. A Pixel 9a or 10a running Graphene for everyday use plus a cheap Android phone that stays are home are still considerably cheaper than Apple and Samsung devices, and give the users far more privacy and freedom.