Is there some way to stop GrapheneOS from automatically installing updates in the background or from applying the update on reboot?
In particular, it seems to me that this functionality would be crucial in the case that somehow, the GrapheneOS project got compromised and malicious updates got signed.