The graphene team is probably used to comments like this. It's a lot easier to give unsubstantiated claims than it is to actually work on a FOSS privacy/security product. You can't please everyone if the expectation is perfection.