My understanding is that GrapheneOS chose it for specific hardware security requirements that no other family of devices meet (or met at the time) but I kinda agree that it always felt icky to me that Google was simultaneously the software vendor we’re hiding from and the hardware manufacturer that we’re supposed to buy from.