Is it scaring them or are they acting scared?

Graphene being pwned is not mutually exclusive with authorities targeting individuals for using a phone marketed toward people who don’t want to be pwned

I'm just going by occam's razor. It's good to be skeptical/paranoid and to know your threat model. I wouldn't be surprised if there's a powerful entity out there with a zero day for GrapheneOS / Pixel hardware and used it to target Medhurst. But I wouldn't throw the baby out with the bathwater even if that actually did happen. We're in the middle of the storm with the advent of highly competent AI-assisted cybersecurity atm.