I'd be interested in the specific security check GrapheneOS fails here. Is it checking device security, or just whether Google certifies the OS?