this is the correct answer. it's not in grapheneOS' court. Google has to flag or allow the OS to pass their checks.

only way grapheneOS' could do it is maybe spoof it but would break their security model.

(and maybe spoofing isn't even possible anymore? idk been a while since I read into the issue)