Bti Yet it will try to perform DCL via memory, when it's not supposed to be running.
I think you are misunderstanding how this works on GrapheneOS. GOS allows you to disable/enable DCL via memory and storage, as well as the other Exploit protections.
When you disable DCL GrapheneOS will alert you via notification when DCL is attempted, this notification doesn't signify the app was successful in using DCL what it does do is signal that GOS was successful in blocking DCL. The same applies for the other Exploit protections.
There's quite a few apps that use DCL via memory/storage, especially social media apps, most don't behave properly and crash unless they are given permission to do this via Exploit protection compatability mode or the individual DCL via memory toggle
EDIT: I might be misunderstanding where your frustration lies. I was thinking it was with Tiktok attempting DCL when it shouldn't. I'm now seeing your problem is with Tiktok performing tasks in the background when "it's not supposed to"