cuharodoxyzx Non-grapheneOS user here. Sadly I dont have a pixel phone (yet).
Used Pixel 7a's may not be too expensive, depending on budget. Look for "factory unlocked" if possible, and also look for a good return policy.
cuharodoxyzx Tried making dns redirect rule path1.xtracloud.net to qualcomm.psds.grapheneos.org but I am not sure that requests actually go through and return a valid almanac.
If the client is using https to connect to path1.xtracloud, and ends up speaking with qualcomm.psds.grapheneos.org instead, I would mostly expect TLS negotiation to fail, because detecting malicious DNS spoofing is a goal of that protocol family.