Uses closed source firmware blobs. Could be a honey trap.
Discussion
“Surprisingly, the deGoogled phone's first connection is to google.com. According to Google, the host android.clients.google.com serves the Google Play Store for periodical device registration, location, search for apps and many other functions. This is strange because we have a deGoogled phone without the Google Play Store. Later we found out that this request originates from microG, an open source re-implementation of Google's proprietary core libraries and applications.
Then it connects to connectivity.ecloud.global which, according to /e/OS, replaces Android's Google server connectivity check connectivitycheck.gstatic.com.
…
“
GrapheneOS has addressed this and called microG out. But still they are uses Google hardware and firmware. As far as I know, no devices can be trusted, even with the most privacy focussed OS running on them.