- Edited
Seems you were on the right track @abcZ
in this issue the problem is also very well explained about SELinux and a special sepolicy which is missing.
One GrapheneDev answered with "Won't Fix" because it can be an attack vector for them ;( ;(
https://github.com/GrapheneOS/os-issue-tracker/issues/1841
They think Google will fix it but I would not bet on that (they don't have sepolicy problems on their firmware).
For me this is unfortunately a dealbreaker against GrapheneOS on my new Pixel 7 Pro (that device was too expensive to not use the camera AND THE DSP to its fullest)