About my complaint, they prorrogated for another month to give me a reply, answered "we forwarded to the responsible institution, bye" and closed the complaint. I had argumented from the technical (hardware attestation), legal and political (dependency on foreign powers for citizen services) standpoint. Now, I opened a "solicitação" to see what happens, but I won't keep my hopes high.
Thanks @vdb for joining the discussion. I get the arguments, but from a technical point of view, using hardware attestation that GrapheneOS does offer solve the same problem. I know things that are technical possible may be politically hard to impliment in your job and maybe your higher ups never heard about GrapheneOS and think a SO blessed by Google is automatically secure. So, while we are trying to change things from outside, you could be the change we need from inside.