They do not have a say in what GrapheneOS runs. The signing keys for GrapheneOS are controlled by GrapheneOS.