From 06f84856e1de861fb3f6b0297bc32af16392cc8a Mon Sep 17 00:00:00 2001
From: Daniel Micay
We have our own Setup Wizard for the initial setup of the device and for user + profiles. It's very similar to the Setup Wizard in the stock Pixel OS but has + more emphasis on security. It detects an unlocked bootloader at the start and + warns the user about it with a button for rebooting to fastboot mode in order to + lock the device. Skipping the warning requires waiting for a timer to prevent + quickly skipping through it and missing the important information. Our setup + wizard also disables OEM unlocking by default at the end of the process with a + toggle to opt-out of it being disabled, which is a small but useful reduction in + attack surface. We plan to include our improvements to lock method options in + our Setup Wizard including 2-factor fingerprint authentication along with + generating random diceware passphrases and PINs automatically.
+