I agree with their points in the thread, but could Graphene "become" an OEM to get access to the security patches sooner? Just curious.
[0] https://grapheneos.social/@GrapheneOS/115164297480036952
They just can't make an official release with it, because they can't publish the patch sources (embargoed) and their releases being open-source must match what they published...