An Analysis of GrapheneOS's Server Infrastructure

GrapheneOS, while maintaining strong security features on its phone OS, shows inconsistencies in its server infrastructure that conflict with its stated security values. The analysis reveals that founder Daniel Micay retains control of critical infrastructure two years after stepping down, and the servers run Arch Linux with rolling updates rather than the hardened, stable systems typical of security-focused operations. The infrastructure choices—including full OS installs for minimal services and personal configuration files on production servers—suggest a disconnect between GrapheneOS's rigorous phone security practices and its more casual approach to backend systems serving 400,000 active users.