GrapheneLover Google Play Services is privileged on stock Android so there it does have access to hardware identifiers. That might have been the source of your misunderstanding.
Normal user-installed apps on stock Android do not.
On GrapheneOS, Google Play Services is sandboxed like any normal app, so it can't access hardware identifiers.