I didn't have time to review it, but there is some way to explicitly trust GrapheneOS. Maybe that is what they mean?