They could conceivably lock the bootloader, but Graphene now has a partnership with Motorola.

There are many ways Google could prevent third parties from using Android code, and the code of Android components (e.g., Google Play), to make varient OSes. Without Android support and compatibility, it would be very tough going for GrapheneOS.

They already are slowing the publishing of AOSP (or something like that).