For high security use cases like journalists, dissidents, civil society workers, politicians, etc., having a locked down phone with just what is needed is a huge benefit. Then someone with the tech knowledge can make a trusted setup, e.g. only apps from f-droid.org or only a specific in-house repo, and pre-configure devices so that users can only install vetted apps. This would need to lockdown Unknown Sources, Aurora, and any Privileged Extensions outside of F-Droid. It would also need to lockdown adding new repos to F-Droid. For example: https://gitlab.com/fdroid/fdroidclient/-/issues/2238