Just another Android fraud signal wrapper

Great, another "DeviceTrust" that really means "trust no one with a custom ROM." Your fraud signals are just a hit list of Android enthusiasts. Unlocked bootloader? Fraud. Rooted phone? Fraud. You're not stopping criminals, you're punishing the people who actually control their devices. Those signals are trivially spoofed anyway. Anyone running fraud at scale uses better tooling than a random emulator. They'll fake the build props, hide root, spoof the fingerprint. Meanwhile your legit users get stuck in endless verification funnels. You're putting friction on the people you can identify. The real stink is the data collection. DeviceTrust gathers a profile of how people interact with their phones. That's not fraud prevention, that's surveillance with a business justification. And once you've built that dataset, it won't shrink. So ask yourself: what happens when the signals are noisy? A false positive crisis on day one. Have fun explaining to a paying user that their developer-friendly phone is a fraud indicator. Maybe focus on actual behavior instead of punishing the hobbyists.