AFAIK you can verify the integrity of an existing GrapheneOS installation.
Indeed you can: https://grapheneos.org/install/web#verifying-installation
Indeed you can: https://grapheneos.org/install/web#verifying-installation