Nobody

Packagekit mainly.

It also helps if you just focus on a single package format. The Snap Store’s performance is great, though I have seen some baffling QA issues with it (like categories showing up like “Devel…”). There’s also that store that Universal Blue is pushing, forget what it’s called.

Pixels have better security features than Samsung and doesn’t prevent you from using third party OSes.

More details here: https://grapheneos.org/faq#recommended-devices