avidgrapher Disabling the network permission reduces attack surface but will not eliminate all attack vectors. I suggest you reread the features page of the GrapheneOS website if you haven't done so recently: https://grapheneos.org/features
Even with the network permission disabled, avoid installing an app which you have reason to be believe might be malicious.