They could easily permit GrapheneOS without compromising on security. Not doing so is either a sign of gross incompetence or plain malice.