LineageOS supports a custom avb (android verified boot) key and a locked boot loader on a very limited number of devices, and surely not a galaxy s4. Which is to say if malware was installed on your device it could be persistent through boot/reboot cycles. There will be no verifying OS integrity. Also on a device that's been unsupported for that many years, the firmware and software that you'll have access to is dramatically less secure. And this just can't improved by also not having a locked bootloader.
Lineage can only do so much to support devices after they've reached EOL, which while I agree sucks, it's a problem that's at the hardware level (Qualcomm and Samsung make it impossible to continue meaningful support).
I understand if you're trying to keep a device alive that you already have, but buying a phone for this purpose is probably not a good call. Or do you live in an area with limited access to newer tech?
If you can at all, the cheapest and best move would be to buy something like a Pixel 6a or 7a (or even a 5a) and run GrapheneOS.
How do you find out what set of devices?
The short awnser is: https://wiki.lineageos.org/devices/
The m8 also wasn't supported anymore but since mine will mostly/only be used for media playback (you know, great speakers) so security isn't my bigest concern.
Can I ask why?
LineageOS supports a custom avb (android verified boot) key and a locked boot loader on a very limited number of devices, and surely not a galaxy s4. Which is to say if malware was installed on your device it could be persistent through boot/reboot cycles. There will be no verifying OS integrity. Also on a device that's been unsupported for that many years, the firmware and software that you'll have access to is dramatically less secure. And this just can't improved by also not having a locked bootloader.
Lineage can only do so much to support devices after they've reached EOL, which while I agree sucks, it's a problem that's at the hardware level (Qualcomm and Samsung make it impossible to continue meaningful support).
I understand if you're trying to keep a device alive that you already have, but buying a phone for this purpose is probably not a good call. Or do you live in an area with limited access to newer tech?
If you can at all, the cheapest and best move would be to buy something like a Pixel 6a or 7a (or even a 5a) and run GrapheneOS.
How do you find out what set of devices?
The short awnser is: https://wiki.lineageos.org/devices/ The m8 also wasn't supported anymore but since mine will mostly/only be used for media playback (you know, great speakers) so security isn't my bigest concern.