GrapheneOS is attempting to pursue the "legal" way: https://news.ycombinator.com/item?id=41119047