I think GrapheneOS should come with a no-compromise-security branch that only supports Google Pixel phones and an “ordinary security” branch that supports a wide variety of less-secure but non-Google hardware for people who can’t stomach the idea of buying a Google phone.

GrapheneOS would reach a much wider audience, and not everybody needs perfect security. I for instance am a low-value target and I have no need for GrapheneOS-level security.