GrapheneOS's propaganda about every android ROM being insecure except their's seems to working.
Nothing is 100% safe. There are varying degrees. GrapheneOS can be exploited just "the most secure phone OS" that is supposedly iOS.
If attestation is wrong and GrapheneOS is slamming another group for making an attestation system but GrapheneOS has its own attestation, doesn't that seem a bit hypocritical?