You’ve proven my point with the “even if”, which is what those who think Android fixes this resort to. “Even if Calyx and Graphene are compromised, you can build your own OS and phone from the dark matter of the universe.”
This is not what normal users can or will do.