In part one I argued that convenience is the bait, and that doing things the hard way is worth the friction. I also conceded Cory Doctorow’s point: individual choices won’t fix enshittification. Policy will. This post covers why GrapheneOS needs that policy to survive, who is actually writing it, where they should point it next, and what you can do to help.