Spend the time to explore the device and it's settings there is no one size fits all, and GrapheneOS is setup in the main with an ideal OOB setup.
Go to SETTINGS>SECURITY & PRIVACY then look at EXPLOIT PROTECTION then MORE SECURITY AND PRIVACY.
Take a look at those options while feeling free to come back here and discuss specific ones if you need to.