Which is why I don't trust GrapheneOS. They seemingly push Google on the privacy and security crowd while ignoring truly freedom-respecting devices like GNU/Linux phones, which would be supported forever.
For GrapheneOS, trust in Google is ultimate. If you don't trust it, you're out of luck. My threat model is different.