Develop Bugs

Any chance of root without unlocked bootloader? For advanced customisation

I'm really keen on rooting just for the customisation options. I'd rather not lose warranty for sticking a custom boot animation and custom fonts on the device. In all likelihood that's all I'll ever need root for. I'm assuming this (rooting with a locked bootloader) is possible, but no method has been discovered yet?
In the meantime, any other suggestions on customising the phones font / boot animation? Is this possible without root? I've tried custom launchers (apex, nova, go, the Microsoft one I've forgotten the name of) but honestly prefer the stock one.

I wouldn't say it's possible. At least not in Android versions after Lollipop when Kingroot etc could do the job. That was some time ago though. Sorry, you'll have to unlock bootloader if you want to root that's just the way it is today.

Oh well, guess I'll forego my warranty then. Only another 7 days to go until I can unlock it haha.

the only thing stopping me from rooting is the fact ill lose android pay which ive really become a fan of lately. Before this i rooted every android phone i had. i would advise u to think long and hard before rooting in case u regret it.

sam00561 said:
... ill lose android pay...
Click to expand...
Click to collapse
No, you'll not. Just be sure to flash stock nougat rom, not deodexed one. And don't use supersu/phh's, only Magisk. You will get root and certified play store at same. Read my post here for more information :
https://forum.xda-developers.com/showpost.php?p=72382305&postcount=22

Is there a way to root my Mi 6 without unlocking the bootloader?

Good day guys,
Today I received my Mi 6. Friends told me Xiaomis usually come with an option to enable root, but I can't find it here. Can anyone help me?

I think you need to install the Developers Rom and there you have an option to enable root.

Ammmm no, you can't, at least you discover a zero-day exploit with execution code and bla bla bla.
For Root, you need mod boot/system image in the best case, or flash a tool like supersu to make the changes in fly... so you need a unlocked bootloader or custom recovery and flashing custom recovery need a unlocked bootloader.

Theliels said:
Ammmm no, you can't, at least you discover a zero-day exploit with execution code and bla bla bla.
For Root, you need mod boot/system image in the best case, or flash a tool like supersu to make the changes in fly... so you need a unlocked bootloader or custom recovery and flashing custom recovery need a unlocked bootloader.
Click to expand...
Click to collapse
Thanks for the reply, I guess i'm requesting the bootloader unlock to Xiaomi then.

Theliels said:
Ammmm no, you can't, at least you discover a zero-day exploit with execution code and bla bla bla.
For Root, you need mod boot/system image in the best case, or flash a tool like supersu to make the changes in fly... so you need a unlocked bootloader or custom recovery and flashing custom recovery need a unlocked bootloader.
Click to expand...
Click to collapse
what about install TWPR (still locked) then root it? is it possible?

mennas said:
what about install TWPR (still locked) then root it? is it possible?
Click to expand...
Click to collapse
Are you kidding?
No.
When boot loader is locked only code signed by xiaomi will run.
So twrp will just not bootup.
Also fastboot is only enabled on the phone when boot loader is unlocked so you'd have a hell of a time flashing it
And then youd likely softbrick the phone with no recovery to flash a ROM so maybe even hardbricked...
Don't try.
Just unlock.

Dobsgw said:
Are you kidding?
No.
When boot loader is locked only code signed by xiaomi will run.
So twrp will just not bootup.
Also fastboot is only enabled on the phone when boot loader is unlocked so you'd have a hell of a time flashing it
And then youd likely softbrick the phone with no recovery to flash a ROM so maybe even hardbricked...
Don't try.
Just unlock.
Click to expand...
Click to collapse
I don't know if this applies to Xiaomi and if it works on more recent versions of Android but on Xperia Z3, installing TWRP with locked bootloader was actually possible I did it myself, and hundreds of others has done it to (you couldn't change to a non-stock ROM, without unlocking the bootloader of course, but that's a different story)
Obviosly that would need a newer exploit in order to push TWRP.
But of course Google or Xiaomi may had added additional protections to the bootloader since then.
(with this being said, you probably need to be quite experienced to start looking into that kind of stuff)

-Zteam- said:
I don't know if this applies to Xiaomi and if it works on more recent versions of Android but on Xperia Z3, installing TWRP with locked bootloader was actually possible I did it myself, and hundreds of others has done it to (you couldn't change to a non-stock ROM, without unlocking the bootloader of course, but that's a different story)
Obviosly that would need a newer exploit in order to push TWRP.
But of course Google or Xiaomi may had added additional protections to the bootloader since then.
(with this being said, you probably need to be quite experienced to start looking into that kind of stuff)
Click to expand...
Click to collapse
You'll notice on newer xperia phones that's jot possible
You have to unlock.
They wised up and patched the KitKat exploit (although one was found in the 575 kernel)
So yeah potentially it would be possible to find an exploit and modify /system.
But the Z3 (I own one too) required having the mods to be in system if the BL was locked. Wolfbreak obviosuly managed to get twrp installed to system and then used scripts to open it.
But a custom kernel would still brick the phone.
So you were confined to root and recovery and custom ROMs based on stock.
You have to unlock to modify the kernel (which most root now does to avoid safetynet)
So there's not much point in this system level exploit.
Phone wouldn't boot as soon as a non stock or modified kernel was installed (lots of people would try and do this and brick their phones I guarantee)
Much better to just unlock.

Dobsgw said:
You'll notice on newer xperia phones that's jot possible
You have to unlock.
They wised up and patched the KitKat exploit (although one was found in the 575 kernel)
So yeah potentially it would be possible to find an exploit and modify /system.
But the Z3 (I own one too) required having the mods to be in system if the BL was locked. Wolfbreak obviosuly managed to get twrp installed to system and then used scripts to open it.
But a custom kernel would still brick the phone.
So you were confined to root and recovery and custom ROMs based on stock.
You have to unlock to modify the kernel (which most root now does to avoid safetynet)
So there's not much point in this system level exploit.
Phone wouldn't boot as soon as a non stock or modified kernel was installed (lots of people would try and do this and brick their phones I guarantee)
Much better to just unlock.
Click to expand...
Click to collapse
Of course you will be much more limited without unlocked bootloader but on the other hand you don't have to void your warranty, unrooting your phone, without any traces of root is very useful, if you happens to need your warranty.
And you can still use stuff like setcpu, xposed framework, enable EIS and camera api2. just to name a few things.
Safetynet didn't bother me that much.
That's why people are looking for ways to root without unlocking the bootloader.

-Zteam- said:
Of course you will be much more limited without unlocked bootloader but on the other hand you don't have to void your warranty, unrooting your phone, without any traces of root is very useful, if you happens to need your warranty.
And you can still use stuff like setcpu, xposed framework, enable EIS and camera api2. just to name a few things.
Safetynet didn't bother me that much.
That's why people are looking for ways to root without unlocking the bootloader.
Click to expand...
Click to collapse
OK well when the exploit is found you'll have it

Dobsgw said:
Are you kidding?
No.
When boot loader is locked only code signed by xiaomi will run.
So twrp will just not bootup.
Also fastboot is only enabled on the phone when boot loader is unlocked so you'd have a hell of a time flashing it
And then youd likely softbrick the phone with no recovery to flash a ROM so maybe even hardbricked...
Don't try.
Just unlock.
Click to expand...
Click to collapse
10 hours left lol. i hope after 10 hours there will be no more additional trouble coming up.
So, my plan after im able to unlock it is to root>install twrp>flash it back to global stabel(my current is global beta).
im still confused about stay with beta or flash it back to stabel. Any sugesstion?

mennas said:
10 hours left lol. i hope after 10 hours there will be no more additional trouble coming up.
So, my plan after im able to unlock it is to root>install twrp>flash it back to global stabel(my current is global beta).
im still confused about stay with beta or flash it back to stabel. Any sugesstion?
Click to expand...
Click to collapse
Stay with beta its usually better.
Or switch to aosp if you don't like MIUI
Stable Oreo should come soon as the Chinese ROM just got Oreo stable

Dobsgw said:
Stay with beta its usually better.
Or switch to aosp if you don't like MIUI
Stable Oreo should come soon as the Chinese ROM just got Oreo stable
Click to expand...
Click to collapse
ok. ill stay with this beta oreo then thanks

Dobsgw said:
Stay with beta its usually better.
Or switch to aosp if you don't like MIUI
Stable Oreo should come soon as the Chinese ROM just got Oreo stable
Click to expand...
Click to collapse
Wait, is Chinese stable on oreo already?

NickTheSickDick said:
Wait, is Chinese stable on oreo already?
Click to expand...
Click to collapse
Yeah.
Also expecting Oreo kernel sources to release soon too

Dobsgw said:
Yeah.
Also expecting Oreo kernel sources to release soon too
Click to expand...
Click to collapse
Damn, that didn't take long. I remember just how buggy it was when oreo first entered alpha.

NickTheSickDick said:
Damn, that didn't take long. I remember just how buggy it was when oreo first entered alpha.
Click to expand...
Click to collapse
They need to be even quicker 8.1 has been out for a fair while as well....
At least it got to Oreo.
I'm sure there will be more updates for the "stable" branch soon.
In my use I found beta to be better

why NOT root?

given all of the cool options that open up with root, im wondering why NOT do it??
i mean other than no Android Pay, and having to manually flash rather than ota on phone, is there any real downside?

byproxy said:
given all of the cool options that open up with root, im wondering why NOT do it??
i mean other than no Android Pay, and having to manually flash rather than ota on phone, is there any real downside?
Click to expand...
Click to collapse
You can use Android Pay with Magisk I believe. Magisk passes saftey net checks.

byproxy said:
given all of the cool options that open up with root, im wondering why NOT do it??
i mean other than no Android Pay, and having to manually flash rather than ota on phone, is there any real downside?
Click to expand...
Click to collapse
Those downsides are enough for some, but the biggest PITA is if you didn't unlock your bootloader then you have to factory wipe when you unlock.

Tb0n3 said:
Those downsides are enough for some, but the biggest PITA is if you didn't unlock your bootloader then you have to factory wipe when you unlock.
Click to expand...
Click to collapse
well google backsup your app, mms, sms etc and the way you have your phone set up. Easy to restore and takes 30 mins depending on your connection.... I say go for it!

byproxy said:
given all of the cool options that open up with root, im wondering why NOT do it??
i mean other than no Android Pay, and having to manually flash rather than ota on phone, is there any real downside?
Click to expand...
Click to collapse
for some it is android pay
but for others
they don't need it anymore
stock rom nowadays give us most of the options that we needed to root for back in the day
i used the pixel 2 without root for 1 week (before it came out )
and the only thing i need it for was adaway and custom kernels
i used non-root adblocker and it's actually worked fine
so if i am stuck with a phone with no root i can live with it

I always root, but the big downsides are around OTAs and needing to jump through hoops from time to time to update.
Finally it's a security issue, particularly a unlocked bootloader, it's super easy to erase pin or pattern locks from twrp. Also malware in a root app could be devastating to any info you access via phone.

byproxy said:
given all of the cool options that open up with root, im wondering why NOT do it??
i mean other than no Android Pay, and having to manually flash rather than ota on phone, is there any real downside?
Click to expand...
Click to collapse
Because some security flaws that come along and some malicious apps expose the fact that you have root to be more effective.

If a good and stable rom like Pure Nexus that passes safety net works flawlessly on the Pixel XL 2 then that would probably be enough for me not to root. That would provide enough features and excitement to the already great experience that stock android now provides. Right now, i enjoy root in order to apply adaway and delete system apps if i so choose. Also nice to be able to use different color profiles. I am one of those that loves to be able to use Android Pay while rooted.

elreydenj said:
If a good and stable rom like Pure Nexus that passes safety net works flawlessly on the Pixel XL 2 then that would probably be enough for me not to root. That would provide enough features and excitement to the already great experience that stock android now provides. Right now, i enjoy root in order to apply adaway and delete system apps if i so choose. Also nice to be able to use different color profiles. I am one of those that loves to be able to use Android Pay while rooted.
Click to expand...
Click to collapse
I'm just here praying they're working on Resurrection Remix.
I was on PureNexus and decided what the hell and tried RR and it has everything PureNexus has and more.

DevanteWeary said:
I'm just here praying they're working on Resurrection Remix.
I was on PureNexus and decided what the hell and tried RR and it has everything PureNexus has and more.
Click to expand...
Click to collapse
Ill keep that in mind. Did RR pass safety net out of the box on the pixel XL?

elreydenj said:
Ill keep that in mind. Did RR pass safety net out of the box on the pixel XL?
Click to expand...
Click to collapse
I don't remember. Sorry. :/

I used to be an avid rooter and custom rom user. For me, I'm contempt with the stock factory images. May give PureNexus a shot if it comes around.
Besides, I had an incident with Chase Bank once where I was having trouble getting text alerts. After an hour on the phone with support, they noticed and mentioned I had a "tampered" device. Not that my problem had anything to do with my device being tampered with (rooted), and not that I had any modifications which could cause harm to my banking information, but in the long shot case something did ever happen with your money, I'm sure the banks would have no problem pointing their fingers at your phone.
So if a company like Chase scans to see if your device is rooted, I'm sure most app developers do without telling you.
If someone wants to chime in, not exactly sure how apps see it if you have a rom like Resurrection Remix, or PureNexus, and actually dont root it. I wonder if the apps still consider the device tampered with if there is no root access

byproxy said:
given all of the cool options that open up with root, im wondering why NOT do it??
i mean other than no Android Pay, and having to manually flash rather than ota on phone, is there any real downside?
Click to expand...
Click to collapse
You can MOST definitely have Android pay with Root in Pixel. That is the beauty of dual partition setup. Have one partition rooted and other non-rooted, with both sharing the same data partition.
I had done this for the past year on the OG Pixel XL. The only time I would need non-root would be for Android pay - I would just boot to the other slot. Use Android pay and then reboot to the previously active slot after finished.
As for Custom ROM - I'm hoping against hope. Hard to imagine life without the features of PN or RR. However, it is not encouraging given that there is no a single OREO based Custom ROM yet for the OG Pixel XL. Who knows how many developers actually end up getting the Pixel 2 XL - which is more expensive. That is the only reason I'm still waiting with bated breath until my return period for Pixel 2 XL expires. Luckily, the One Plus 5t launches on Nov 16th and the reviews would be out soon. I know OP5 has RR custom ROM which is a big deal..

abogrhen said:
for some it is android pay
but for others
they don't need it anymore
stock rom nowadays give us most of the options that we needed to root for back in the day
i used the pixel 2 without root for 1 week (before it came out )
and the only thing i need it for was adaway and custom kernels
i used non-root adblocker and it's actually worked fine
so if i am stuck with a phone with no root i can live with it
Click to expand...
Click to collapse
Yes to all this. I haven't rooted since my Galaxy S5. I was perfectly fine with my Nexus 5X stock and do use Android Pay often enough to want to remain unrooted. I actually used to root and install stock-like ROMs so now that I've been getting Google phones, I have no need.
Sent from my Pixel 2 XL using Tapatalk

Unlock, Root, Xposed and then relock

Hi, my Mix2 arrived few days ago and I find MiUI quite nice, yet lacking few things. Those are easily available via xposed, hence I need to root. I'm also not so lucky in these matters so before I start to tinker with it I'd like to learn few things.
What are least dangerous ways to unlock and root phone? (heard sth about magisk, its quite new for me, haven't been rooting phones for couple years now) Is it good?
Suppose I succeed unlocking, rooting and flashing xposed, can I relock bootloader? I want that because ie AndroidPay needs that to work, and I haven't found any working rootcloack or similar (at least on Note2)
How reliable is 'the most official tool' for xiaomi flashing (from eu.xiaomi.com ?)? I mean can it bring back the dead or revert phone back to where I started, without any trace of tinkering?
As a new xiaomi owner are there any critical things I need to know?
Thanks!

If you flash magisk, which is the best thing ever btw, you won't have to relock bootloader to get Android pay working.

yeyeoke said:
If you flash magisk, which is the best thing ever btw, you won't have to relock bootloader to get Android pay working.
Click to expand...
Click to collapse
Thanks, I read about that and intend to use it. Though, there might be some issues with magisk and different versions. What features does it have?
So far, need to wait 3 days to unlock bootloader.

Mighty_Ahti said:
Thanks, I read about that and intend to use it. Though, there might be some issues with magisk and different versions.
So far, need to wait 3 days to unlock bootloader.
Click to expand...
Click to collapse
I've been using magisk on my Note 3 Pro since release and I've never had an issue. Yes, I got my mix 2 today and I'm also waiting for 3 days..

Mighty_Ahti said:
Hi, my Mix2 arrived few days ago and I find MiUI quite nice, yet lacking few things. Those are easily available via xposed, hence I need to root. I'm also not so lucky in these matters so before I start to tinker with it I'd like to learn few things.
What are least dangerous ways to unlock and root phone? (heard sth about magisk, its quite new for me, haven't been rooting phones for couple years now) Is it good?
Suppose I succeed unlocking, rooting and flashing xposed, can I relock bootloader? I want that because ie AndroidPay needs that to work, and I haven't found any working rootcloack or similar (at least on Note2)
How reliable is 'the most official tool' for xiaomi flashing (from eu.xiaomi.com ?)? I mean can it bring back the dead or revert phone back to where I started, without any trace of tinkering?
As a new xiaomi owner are there any critical things I need to know?
Thanks!
Click to expand...
Click to collapse
It's generally considered to be dangerous to relock a bootloader with anything other than perfectly stock/factory firmware installed. It may be ok to do this technically but it sort of "ties your hands" in some ways after making an unofficial modification and makes it a bit harder to recover from a botched situation.
You can have an unlocked bootloader and still use Android Pay. This can be achieved either with a ROM that is built to accomplish this (Epic ROM is an example of this) or by using Magisk, which allows root without any sort of SafetyNet trip in many cases. I don't believe there's *any* way to install Xposed and also use Android Pay or any other SafetyNet apps...the best alternative if you really want Xposed is to use Magisk and then install the Xposed Magisk module...you still can't pass SafetyNet with this setup but Magisk allows you to disable Xposed if you're willing to uncheck it in the Magisk Manager app and reboot the phone, after which time SafetyNet should pass ok...at least with this setup you'll be able to kind of have your cake and eat it too, though it's not ideal as you'll have to reboot if you want to change the status of Xposed.
https://forum.xda-developers.com/xposed/unofficial-systemless-xposed-t3388268

Thank you for detailed answer. I didn't know that.
flyer_andy said:
the best alternative if you really want Xposed is to use Magisk and then install the Xposed Magisk module...you still can't pass SafetyNet with this setup but Magisk allows you to disable Xposed
Click to expand...
Click to collapse
I tried AndroidPay few times past few days and it didn't work at all. Perhaps terminals were not compatibile. So lets say I gave up on AndroidPay - can I use regular Xposed along with Magisk? Or does it have to be that module?

Mighty_Ahti said:
Thank you for detailed answer. I didn't know that.
I tried AndroidPay few times past few days and it didn't work at all. Perhaps terminals were not compatibile. So lets say I gave up on AndroidPay - can I use regular Xposed along with Magisk? Or does it have to be that module?
Click to expand...
Click to collapse
Oh! I think I may be able to help you with the Android Pay issue - my phone didn't work right with Android Pay until I made sure *all* Google apps' permissions were allowed via the Apps menu in Settings (along with "Autostart" via the security app)...and also toggled the NFC setting where it lets you select between "embedded secure element" and "HCE Wallet." It probably is on "HCE Wallet" but try toggling to "embedded secure element" and then back to "HCE Wallet" a couple of times. My Mix 2 would not make a terminal connection until I did this...it would just say "card read error." Seems like a firmware bug. Let me know if that helps!
But yeah if you don't want to use Android Pay then normal Xposed should be fine...you wouldn't need Magisk I don't think. Though, I'm not sure but I think the Magisk Xposed module probably functions the same as normal Xposed so I'm not sure there's an advantage in doing so. But of course it's all about personal preference!

Whoah, I'm still new to xiaomi/android7+ policies, where each app's permissions are reduced to bare minimum (messenger not being able to show notifications for example). I will definitely try this tomorrow.
So far I just managed to unlock BL, flash recovery and install magisk. SafetyNet checks ok. Will try xposed tomorrow after some payments ;D Thanks!

HCE wallet worked for me (I had it set to SIM wallet).
If I understand correctly here is the possible solution to xposed+magisk+androidPay.
I'd need phh's su binaries for that and keep crossing fingers for it to work on 7.1
I need to learn more about that stuff before I break something

So as I was expecting I experience troubles in installing Xposed.
I followed official way as in here And got bootloop.
I removed magisk stuff in recovery and fixed bootloop, then installed v89.0 (not .1) and also bootloop.
Im using SDK25, and miui 9 - 7.1.1 so it should be ok I think

Mighty_Ahti said:
So as I was expecting I experience troubles in installing Xposed.
I followed official way as in here And got bootloop.
I removed magisk stuff in recovery and fixed bootloop, then installed v89.0 (not .1) and also bootloop.
Im using SDK25, and miui 9 - 7.1.1 so it should be ok I think
Click to expand...
Click to collapse
Disable hooks from the xposed apps settings before flashing xposed

What hooks? I dont have any modules yet

Mighty_Ahti said:
What hooks? I dont have any modules yet
Click to expand...
Click to collapse
It's a toggle in the settings under experimental, disable resource hooks

Boot took longer but it works. Thanks! Do I have to keep it on all the time ?

Mighty_Ahti said:
Boot took longer but it works. Thanks! Do I have to keep it on all the time ?
Click to expand...
Click to collapse
Yeah, phone won't boot with it on. Don't think it makes much difference anyway

Hi @Mighty_Ahti, how much time was "longer"? it's been loading for over 5 minutes already. Thanks

Certainly below 5 minutes.

doubts about whether to continue using root or unroot and relock the bootloader

I came across this post on GitHub
https://github.com/topjohnwu/Magisk/issues/2534
I wanted to ask if I should continue using root or just relock my phone ?

tanzeel.ahmed1306 said:
I came across this post on GitHub
https://github.com/topjohnwu/Magisk/issues/2534
I wanted to ask if I should continue using root or just relock my phone ?
Click to expand...
Click to collapse
Unlocking your bootloader and rooting your devices is a choice that you and only you can make. There are always risks when modifying your devices. When you unlock the bootloader on most devices it will void your warranty unless stated otherwise by the manufacturer.
When it comes to root access there is always a chance for things to stop working. That is why it is up to you to do your research and make an informed decision before taking any action.
To some people, including me, an unlockable bootloader and gaining root access over a device is a must. I am paying for it and I want to use my devices how I see fit.
If you are concerned about an issue that may arise because you have an unlocked bootloader and root access I always try to look at it from both sides. Why did I unlock the bootloader? Why did I root? Am I able to do what I intended to do or not?
Sent from my OnePlus HD1907 using XDA Labs

tanzeel.ahmed1306 said:
I came across this post on GitHub
https://github.com/topjohnwu/Magisk/issues/2534
I wanted to ask if I should continue using root or just relock my phone ?
Click to expand...
Click to collapse
I'm kinda in the same boat. While I don't use GPay that often (and I can currently use it through Magisk), occasionally it would be nice for it to work without issue. However, the main reason I root is so that I can manually edit my HOSTS file to block ads.
Like fast69mopar mentioned, it's an individual preference. What do you gain by unlocking the bootloader and rooting?
In my opinion, the OP7T is a fantastic phone right from the get-go. So was the OP6T. Both phones I used for almost a full week before unlocking and rooting.

Got the OP7T a month ago and was faced with the same decision. All phones since Samsung Galaxy I have rooted.
Decided not to root the OP7T. So far couldn't be happier. Maybe missed it once. Everything working without issue is nice.
As for Ads.
Built in Private DNS in Android 10 with dns.adguard.com works pretty damn good.

I'm rooted, using magisk and edxposed with aosip. Definitely no loss of function comparing to stock. I don't use Google pay, but Samsung pay, bank apps, snapchat, everything works. Currently magisk and edxposed could be hidden without any loss of function when it comes to bank or paying apps. I don't use Google pay but safety net passes just fine with my setup

fast69mopar said:
Unlocking your bootloader and rooting your devices is a choice that you and only you can make. There are always risks when modifying your devices. When you unlock the bootloader on most devices it will void your warranty unless stated otherwise by the manufacturer.
When it comes to root access there is always a chance for things to stop working. That is why it is up to you to do your research and make an informed decision before taking any action.
To some people, including me, an unlockable bootloader and gaining root access over a device is a must. I am paying for it and I want to use my devices how I see fit.
If you are concerned about an issue that may arise because you have an unlocked bootloader and root access I always try to look at it from both sides. Why did I unlock the bootloader? Why did I root? Am I able to do what I intended to do or not?
Click to expand...
Click to collapse
Thanks a lot for your response
I actually rooted because I wanted to use substratum themes and enable aux module in gcam. Apart from that no other reason.
So I guess I am not missing out on too much .
I actually unrooted my phone and relocked the bootloader.
But again thanks for the response!

I had unlocked the bootloader and tried a couple of custom ROMs a few months back but decided it isn't worth it because my main hindrance of adblocking is addressed using DNS and any unneeded app can be disabled using adb. On the flip side, I need Widevine L1 for Netflix/Prime and no custom ROM can offer that on the 7T.
Makes more sense to me to stay within the walled garden, especially with the higher risk brought about by rogue Android apps that are now far too prevelent. The mods too are not that much value adding than it was may be when I first started using custom ROMs nearly a decade ago.