How is a pixel with grapheneos not a secure device?

Ps no it's not rooted but it won't pass full play integrity so it will usually be treated as such.

Also, a properly configured root is not a weakness just like having a computer where you don't log in as admin unless you really need to can be just fine.