Author also points to https://privsec.dev/posts/android/f-droid-security-issues/

I'm not really sold on the argument... Also constant push/hype of GrapheneOS (and the "attitude" of it's devs) is mildly annoying...