Orange

Jojojo Other than short name, none. I have it set up as RedLib recommends which has no logging, but I have no way of proving it. RedLib features are pretty much all the same for all instances, I think.

RedLib is a decent frontend I use to avoid being blocked.
You can find instances on their website.
https://github.com/redlib-org/redlib
https://r.genit.al (Instance I personally use because it's mine)

Not that my setup is perfect, but what I use is:
PIN: I generate random 6 numbers using password manager, and store it there for a while. Once I manage to remember it, I add one digit to it every now and then. But most of the time, I treat this like any other password.
Password: Password manager. I come up with one fairly secure password, and use it to log in to Bitwarden. All other passwords are generated with password generator in it.

KeePass is also good, especially if you prefer going offline. Perhaps you can use that dice to generate a secure and long password of 5 words (I'm pretty sure 5 is enough given the word pool is large enough), and use that for password manager.

One major feature GrapheneOS have is extended number of user profiles. It's like work profile, except it pretty much behaves as if it's an independent phone, and you can create up to 32 of such spaces, from original 4. Most use this to isolate rather invasive apps to their own space, leaving them with not much to see. Profiles can be turned off, disabling all apps inside. This alone, in my opinion, is major gain in privacy. It's not like anything can stop the social media company from knowing your social media usage itself, but you can control a lot outside that.

Recently, I turned my phone on, and it said the following message with a red triangle:
"Your device is corrupt. It can’t be trusted and may not work properly."
I assumed this was because of a VoLTE patch I did a while ago (This was effectively required since my provider does not allow any phone calls or sending/receiving SMS without it, and there's no way around it), which required me to root the phone and keep the bootloader unlocked, combined with some updates over time.
Phone did not boot, and I simply reinstalled the OS without the patch for now. Understandably, this is not within the scope of what the developer would fix against.

However, this raised a question: If this happened with locked bootloader and could not be unlocked due to OEM lock, would this mean that the phone would be bricked completely, with no chance of ever using it again, even if the integrity of the data on it didn't matter? Would this also mean that locking OEM is a bad idea in terms of functionality, if you are not particularly interested in protecting yourself against something as severe as targeted surveillance?

I think I figured out the issue: https://discuss.grapheneos.org/d/292-work-profile-and-the-limit-of-active-profiles/10

I have more than 3 profiles, all of which I regularly cycle through. Since owner profile always count towards this limit, it's effectively 2 profiles plus owner that can stay active at the same time (i.e. no "Unlock with passcode after restarting your phone"), which is why VPN was kept getting shut down once I open a third profile. Because this is hard limit, I am guessing this won't change any time soon. Nevermind, post in link suggests that there may be increase in this limit due to 3rd gen being cycled out. Are there any updates regarding lifting this limit?