It's easy to be secure if you just remove features. There's obvious tension here.

Could you be any more specific about what features they've removed such that the hardening functions work? Because I think there are none

They're quite open about it. https://grapheneos.org/features#attack-surface-reduction

You said removing features. This link is talking about making certain feautures optional and disabled by default, not removing them.