

I’m not disagreeing with anything you’re saying and I think the articles about this are sensationalized in the impact in some ways, but I think you’re focusing too much on the type of traffic that is typically encrypted with HTTPS/TLS.
I think the bigger issue is internal networks where it is still common to run non encrypted and/or unauthenticated services. This is particularly an issue when SSID segreagation (lile guest networks) was used to mitigate this kind of issue. The AirSniff paper shows that SSID isolation in many APs can be bypassed.





My POV (having not used a Jolla phone) is that it’s likely to be less convenient than GrapheneOS (I do use Graphene). I understand SailfishOS has an android compatibility layer but I assume there will be random apps that don’t work well with it (Graphene isn’t free of this either). That said, I want consumers to have more options, which means there needs to be early adopters willing to accept limitations or convenience to build up the ecosystem of alternatives, so if you’re willing to do that, I think you should. I realize this is selfish in some ways, but it’s also good in the bigger picture.
I wouldn’t be surprises if the Motorola phone gets heavily delayed and eventually cancelled (I have no inside knowledge, but have been hopeful about too many things that get cancelled to be optimistic until it’s widely available). As such, I think another benefit of Jolla is it’s more likely that you’ll get one (in a reasonable time).