No, GrapheneOS is a privacy project. The primary focus is providing usable privacy. GrapheneOS solely works on security to protect privacy.

We never said that about the SafetyNet Attestation API and that's a dead service. We've explained that we cannot provide a long term for the Play Integrity device integrity level because they can easily detect spoofing and very easily block it. The device integrity level is also gradually phasing in a requirement for hardware attestation. Apps already use the strong integrity level to enforce it.

>For example they have stated they won't try to spoof SafetyNet because "we don't lie about security features"

They said they don't want to do it because it would stop working in the future when Google move to enforcing hardware-based attestation and it is not sustainable.