> You can root and leave your bootloader unlocked

That's Google, not GrapheneOS.