A key takeaway from this situation is that "alternative Android ROMs" are merely remixes of the original Android effort, and not genuine alternatives standing on their own. Absolutely at mercy of Google. Similar to browsers, how we only have like 3 engines for the myriad of browsers that we have. I am a graphene user currently, and I guess Graphene is safe on the current devices, as long as Google and the maintainer does security updates for them, we will just not get Android 16 at worst. And have to figure out what to use after the security support runs out in <7 years. So there is plenty of time still, no matter how they rock the boat.