eabi_ligeti Our extended support releases for the Pixel 4 and Pixel 4 XL include all of the AOSP and GrapheneOS updates including the AOSP security patches. You should not continue using the Pixel 4 or Pixel 4 XL regardless of this because they do not have support for firmware and most of the device support code in the OS anymore. They're end-of-life and will be vulnerable to known public vulnerabilities regardless of which OS you choose to run on them. GrapheneOS extended support releases are harm reduction. Please don't confuse the media attention given to a vulnerability with the severity and how it compares other vulnerabilities including ones that can no longer be fixed due to the device being end-of-life and which are often more severe than this.