To answer your two questions- At this moment, we don’t plan on making the full operating system open source & yes, Mudita Kompakt is based on AOSP 12 and there is no plans to change that. We’ve chosen a proven, stable base (AOSP 12) for its solid security foundation, and we closely monitor for any emerging vulnerabilities. When needed, we deliver targeted patches quickly, no bloat, no unnecessary updates.
Our Managing Director address the subject of adding security patches to our system via updates in this thread: