Carlos-Anso
GrapheneOS authoritatively decided to build on open software AOSP as its base.
Software defects in its chosen base are therefore just as much the GrapheneOS project's problem to deal responsibly with, as millions of other software projects and distros have to properly deal with their chosen libraries and software components all the time.
It is ridiculous (and boring) how this project is always pointing fingers instead of taking responsibility for its fundamental design decisions.
If AOSP is such a problem, then GrapheneOS made a poor decision and should make a new one, just as other software applications do all the time.