admin It would be helpful to know where you got this strange idea that we are against auditing the code and publishing results.
Thanks for engaging with my question!
While I admit I have also skimmed some discussions on other sites, what I wrote above was prompted by a brief exchange here on this forum. I now re-read the FAQ and realize I may have cut too many corners when paraphrasing.
I guess it could be the novelty of the situation I am in (choosing the unknown, to abandon Google Android for something else) that makes me hesitant. After all, I have internalized the risk of being beaten up in the street and thugs forcing my thumb onto the fingerprint reader in order to transfer my money to their accounts. If I am not daily stressing out about that, why should I fear some attack vector unknown to me in the OS that I am using?
Psychologically, perhaps the latter scenario scares me more because I have the option to stay with the privacy-invasive OS? I "have nothing to hide", my interest in GrapheneOS is more philosophical/political in that I despise the privacy-invasive direction our economic systems have been taking.
In Sweden it has become very cumbersome to go through your daily life without using the "Mobilt Bank-ID" app to sign your name electronically. Many public services, transportation and other situations are increasingly just presupposing that you to have that app installed. And friends expect that you use "Swish" instead of cash to transfer money (try using cash in Stockholm, people will treat you as a money-launderer!). Perhaps the solution for me is to try to go old-school on the Pixel with GrapheneOS, and keep my old Google phone in a drawer at home and use it only for banking and electronically signing...
In any case, I wish the devs all the best henceforth.