GrapheneOS distrusts the network. Connections use HTTPS and the integrity of important things like updates is also verified via signatures.