If your threat model is a state actor breaking through your phone's TPM then sure, but for most people escaping the google ecosystem is by far the biggest need in terms of privacy/security

Note: IDK exactly what graphene needs hardware wise, don't quote me. Point is, there's such a thing as "good enough"