You're right that I worded my comment wrongly. More precisely, GrapheneOS doesn't and cannot have the most convenient, most widespread, Google-backed tamper protection, which developers use because it's convenient, and often the easiest way to gain some authority, compliance, or just a badge of security.