GrapheneOS Thank you for keeping us updated, and stating so clearly what the facts are, completely unlike the announcement from Calyx: two key people out begs the question who's left and in charge. That and the bit about changing the signing keys and starting an audit without any further explanation why that is necessary, just as if it were SOP, does not instil confidence. The day before these guys had full control and access to everything yet just a moment later they can't be trusted to the point a very cumbersome process is being initiated despite there being "no reason" for it? It feels there's more to it, which will probably come out to light eventually.
The call to mend fences is a really nice gesture on your part. Let us hope it is reciprocated. Regardless, it should be clear to any unbiased observer that not just the GrapheneOS project itself but also the communications for it are consistently being run extremely well. We as users should really appreciate your professionalism with regard to that because, as illustrated, it's so uncommon.
Now that independent network location has been fully implemented in GrapheneOS, I really don't see why anyone would want to run anything else on a GrapheneOS-compatible device. I think this was the last remaining relative shortcoming: closing that gap has been a major accomplishment and milestone for the project in my view.
I've been wondering though, as for the insecure devices that will never be suitable for a full GrapheneOS release, has there ever been an attempt to consider "GrapheneOS Lite" builds for them using the device-independent portion of GrapheneOS's hardened codebase?
While this of course wouldn't make them secure, and such releases (if any) would probably have to be named differently so as not to erode GrapheneOS's reputation for uncompromising security, it'd still be way better than running outdated Calyx or LineageOS on them, and could potentially serve as a stopgap encouraging more people to switch to proper GrapheneOS – especially when a new, non-Google and potentially self-developed device is added (really hope this works out).
[Minor off-topic]
n3t_admin there aren't too many Rossmanns out there
Funnily, Rossmann is a huge drugstore chain in Germany and some other countries, so to this European the above sounds a bit like "there aren't many Walgreens out there" – although, on the other hand, "Walgreen" must actually be a really rare last name indeed (an anglicization of the Swedish "Wahlgren" according to Wikipedia).