Allowing any deranged "security" zealot into FOSS community and projects is a mistake. Boycott GrapheneOS, boycott Brad Spengler, boycott grsecurity, boycott clowns like madaidan, boycott the ones that go around shitting on F-Droid and promote Google Play Store in the same breath.
Why boycott GrapheneOS? I feel a bit OOTL here, I only know the drama with the ex-lead dev, but I understand that the project as a whole is your best bet at a mobile experience that you control. Am I missing something?
This spans 4 years of privacy community, and explains how the security cult that tries to hack through FOSS community works. If you take just 1-2 hours to go through every piece of information and evidence here, you will no longer be OOTL. I am a true privacy militant.