GrapheneOS' main selling point is security. Is Sailfish OS better at that, or at least in the same league, nowadays?

It's in a different league as it's a linux phone first and foremost, not degoogled/hardened android, you get full root access as a checkbox in settings that will install terminal app for you to hack to your heart's content, user having root access is not an attack vector for them