What safetyNet does GrapheneOS implements of its own?

Pixel is better hardware based on project's security requirement. you're simply wrong here.

Most of what you're complaining about are upstream Android limitation and problem.