I'd be more concerned for face unlock. You take an OS that goes to the extreme to prevent any external intrusion to your phone and you enable an option to unlock it for anyone by holding the phone to your face?

GrapheneOS doesn't support face unlocking right now, but they have a useful two-factor unlock option that requires both a PIN, and biometrics (currently a fingerprint on Pixel devices) to unlock the device while in AFU. It also allows you at the same time to use a long passphrase in BFU.

well the thing is, i don't do anything illegal, i don't have much to hide and even if the police asked me to unlock my phone, i'd do it !

What i don't like is having companies, google amongst others, siphoning my data and making money out of it, while offering in exchange a service that is becoming increasingly worst.

grapheneos with it's enhanced permissions and profiles is pretty god at preventing these spyware from stealing all my data, for instance you can have give whatsapp limited contact permission and make it run in a secondary profile.

face unlock is a tradeoff between security and convenience that i'd happily take ! But grapheneos doesn't give me that choice...