I seriously doubt the developers of GrapheneOS have really done as much due diligence on their custom ROM as Apple has done on iOS. For one, Apple controls the whole stack down to the CPU. GrapheneOS is forced to rely on many external parties to not be hostile from Google with their Android stack to the Linux base to whatever the SOC maker has put into their silicon.