Secure Boot versus Secure Startup--
Secure Boot is on by default. This
is not something the user elects to do.
What Secure Boot does is prevent those custom bootloaders
from being injected onto an Android device.
It is essentially that device checking and saying, hey,
is this signed firmware, or is this something that Cellebrite
or magnet or some third-party created
trying to trick me into providing access
that I don't want to give.
That is not something a user can opt in and out of.
Secure Startup is elective.
It only works on full-disk encrypted devices,
which means this nightmare should be going away
with the devices people are buying.
However, the devices that exist in the wild,
you have to be ready for everything.
It will keep you out if you do not know the passcode.
When you go to enter a passcode on a Secure Startup device,
the first thing you're going to notice
is, it won't have any wallpaper.
So most of us have no wallpapers on our devices.
You will see either a black screen or a white screen,
which just, it wants a passcode.
It won't even show you the user's wallpaper, nothing
about that user.
Secure Startup is a nightmare.
But hopefully it's going away because we're
moving into file-based encrypted devices.