They are indeed different projects. GrapheneOS is maximum security possible. DivestOS is best effort security of old/EOL devices to prevent them from being completely e-waste.
> so one is limited to generally the apps
It has the only unprivileged microG implementation, please read this: https://divestos.org/pages/faq#appCompatibility
Device manufacturers will sometimes list a lower limit than what the device could actually support, simply because there were no larger capacity drives/memory available for testing at the time of release.
I've seen this a few times with ThinkPads, not sure about phones.
But anyways, the limit exists, and this means that whether your device can support larger SD cards after it is released depends on whether the driver is getting updates or not. Android phones are quite known for not releasing driver updates, although often there is updates for Android phones as well. Thinkpads are IBM computers, and the update story is way better there.
but phones that advertise low capacity limits are probably also not wiring the SD interface for high bandwidth. it's not unusual to see internal flash capable of 100MB/s but SD interface only capable of 10MB/s :(