I once put my own root cert on Android and over 2 weeks intercepting, analyzing, and cutting off every phone home background process, until it could only send traffic arising directly from my UI activity.

The amount of privacy abusive traffic was astonishing. Stopping it made the phone basically unusable. I hope some day a real open source, user rights focused OS can accompany something like this.