My 2 cents is that you usually need an unlocked bootloader so you can load xposed and get privacy apps that spoof or block certain permissions per app. That is the unconditional indispensable killer feature for me. I will simply go without a phone before I agree or settle to not use xprivacy on my personal phone. I’ll simply not use apps or services that try to block xposed users. Anyone that has a problem with that will have to provide a company phone. Sure, using this stuff isn’t 100% bulletproof but I’m at the very least making my information more expensive to harvest and at most making it so that governments and corporations have to hire actual/better hackers to steal my info.