They take a proactive approach and lock down things to help protect against future exploit development. My threat model is someone stealing my phone and then having an exploit to be able to access it. Or it being dumped by a an external device. Also extra defence against priv esc virusi. Also the privacy features are much better than what I previously used (calyxos, eOS etc)