IIUC, GrapheneOS cares about being forensics-proof very much. And for Android phone forensics without consent, almost 0% of work are done after the boot chain ends. So it's all about firmware.

Non-Pixel devices usually require you to just give up secure boot, in this case a GrapheneOS install could be even worse than stock Android.