>I just installed graphene os on a brand new cash-bought pixel for the express purpose of not being left out of some important WhatsApp groups or missing out on some other experiences that require installing apps that I know won’t respect my privacy. I assume anything from Meta is hazardous at this point.

There isn't much point in the "cash-bought" part when android has blocked non-system apps from reading hardware identifiers years ago. Not to mention that facebook can easily deanonmyize you through your social graph.