I can't help but feel you're intentionally missing the point. An iPhone itself isn't secure without iOS, iOS is what supplies the limitations

Graphene is iOS

The OS is only part of the attack surface and part of the security features of a smartphone.