Remember that this too ships a huge number of privileged binary blobs and kernel modules from companies like Qualcomm and Google in the vendor partition.

Whoever compiles these binary blobs, and the OS images themselves, and anyone capable of coercing them, has god access to your device.

I suggest getting to know someone before giving them that much power over your life.