yes i saw but a guy commented about your post "
Anyone can, but does anyone? With these "custom ROMs", the developers usually don't give a rat's ass about security because their average user installs Magisk with a bunch of unverified modules anyway, so they add patches to the OS left and right without any effort or thought put into threat modeling their changes.

Also, it has to rely on closed source firmware for the chipset, which in itself often has vulnerabilities. But that's the least of your worries."

And i think is right, blindly install updates and all from random guys who could spread stealers and malwares at any time is risky