As a privacy-related tweak, can GrapheneOS automatically delete the Advertiser ID from sandboxed Google Play? Fog Data Science uses this information to track users and sells the data to whoever is willing to pay:
https://www.eff.org/deeplinks/2022/08/inside-fog-data-science-secretive-company-selling-mass-surveillance-local-police
This ID is enabled by default with Google Play services, but is removable. It is located in Apps => Sandboxed Google Play => Google Settings => Ads