Recent discussion on 90-day embargo for security updates, https://news.ycombinator.com/item?id=45158523
That’s potentially substantial but I note that Graphene specifically rejected the framing:
https://xcancel.com/GrapheneOS/status/1964757878910136346
Yes, they said it was worse, i.e. affected all Android, not only AOSP, https://news.ycombinator.com/item?id=45161011