I imagine GrapheneOS is thinking carefully about their statement on this. I look forward to reading it.
[1]: https://digital-markets-act.ec.europa.eu/contact-dma-team_en
Even if you are a GMS Android user, they are going to make installing apps outside the Play Store much more annoying and these attestation-backed verifications are going to further deanonymize you.