> I'd love some help on this, especially if someone with stock android devices wants to test this

My suspicion is that GrapheneOS has some more restrictive firewall policies that "black-hole" any SYN message. But I am not sure.