You did another important step when we did that GrapheneOS install. You verified that the factory image was signed by the GOS devs with their signing key. It was in the middle of the process there, so it didn't really stand out.