Graphene developers seem enthusiastic to all the bullshit that Google comes up with, and on security/privacy tradeoff they seem to usually choose security. Case in point, the mandatory battery update.

CalyxOS seems to choose privacy first, but that project folded recently.