Graphene OS is not degoogled. Recent revelation of security researcher mike kuketz reveals the thruth:
https://www.kuketz-blog.de/grapheneos-warum-android-eine-verbindung-zu-gstatic-com-aufbaut/The "privacy" ROM connects to Google's gstatic.com for Certificate Transparency logs. While no app data is leaked, Google captures the user’s public IP address and exact request timestamps during these background HTTPS connections.
This enables tracking via cross-correlation: If you open sandboxed apps like X or Instagram, they log your IP. Since Big Tech cooperates and shares telemetry data, Google can match the gstatic connection timestamp with your app activity IP, instantly identifying your GrapheneOS device.
YOU HAVE BEEN LIED TO.