That makes it very easy for any government or anyone with a little power - like influence over what a newspaper publishes - to shut down GrapheneOS. You don't need any law enforcement, law, process, etc. - GrapheneOS will shut down itself at a hint of criticism.

I'm probably breaking some law of North Korea every couple of weeks and I don't give a fuck.

A foreign country can only threaten you if you depend on revenue from this country, or plan to go there. In theory one can even pull of a project like GrapheneOS completely anonymously (assuming you're in a proper free speech jurisdiction that won't rat you out), so people behind it can still travel freely.

French citizens deserve privacy no less than anyone else.