GrapheneOS is a perfect tool to fingerprint specific users.
Bear in mind that they encourage users to use their servers if you want to possess a working device for instance for having accurate clock, system and apps up to date.
For so many years they have not been able to create .onion version of their main site or download site to avoid direct connection or even via exit nodes. They don't have a possibility to update system via Tor.
Is it rocket science for experienced developers? NO, IT'S NOT.
You can assume that this is on purpose. They talk about privacy but they don't care about privacy and your personal security.
If you have doubts. Remember that CryptoAG fooled over 120 countries for dozens of years.
GOS encourages users to use so called sandboxed Google apps.
Keep in mind that even if you use them in separates profiles your phone with GrapheneOS shares the unique ID of your phone.
Using GrapheneOS you're a beacon for any actor who monitors internet traffic.
#m=image%2Fjpeg&dim=1440x1018&blurhash=r66a-dxu%25Mt6IB-%3BD%25t7R*%7EqRi-%3At7IU-%3BITt6Rk-%3BIU%25MxuM%7C-%3BM%7Bt6fRtRM%7Bt7ofRjxuRjofWBt7f6aeayWBWCfPj%5Bj%5BD%25j%5BRjRjj%5BM%7Bt7WBj%5B&x=d04b8882a04e7fe9c1c68b36dfd3b799f78e6427f251a23a516bed334de2566c
#m=image%2Fgif&dim=500x500&blurhash=UAIhEV%7EApd%5E*00IqRjIprV%25MI9IU.9jExux%5D&x=ac5464d69d5d90518eeda2127d5989953f4b17db91afc8de0f624885f24fce33