Did you actually check what your device is getting updates for, if they contain latest firmware, kernel, drivers etc or do you rely on recurring OTA appearing?

Also GrapheneOS can't be compared to other privacy/de-googled roms because none other are as deeply tied to the security/isolation/memory protection features shipping on pre-11 Pixels and 2027+ Motorola flagships.