u/DrawingFar8814

Nothing against the design of it. I just worry about my data.

• No 2FA authentication support. Per CISA, it would mean that you're "99% less likely to be hacked.", but the dashboard doesn't support it.
• App-specific passwords. You can keep a small attack surface on your phone, but app-specific passwords aren't scoped. If it's compromised through the dashboard, it unlocks access to your email, as well. Google's website states they are not recommended in favor of more modern techniques like Signin with Google / OAuth.
• No evidence that any data (phone numbers, notes, contacts) are encrypted at all on rest. Even their Privacy Policy (https://www.thelightphone.com/privacy-policy) hasn't been updated since 2022 and is pretty sparse.

Variations of these requests have come up over the years. I'm happy to start a fundraiser to get it done right if it's a matter of resourcing. More important to me than a phone that flips open.