Linaege and Calyx is OK too, since they actually develope software (Linaege does it from scratch, Calyx develops Seedvault etc). even though they are not as rigid as Graphene, they are still ok for normal ungoogled stuff, and to be honest, most people dont need the security Graphene provides them with.
My problem is with Roms like /E/ OS or Iode, which essentially add nothing of value, but instead Fork Linaege, remove Seedvault and everything what isn't essential, and sell what is essentially a DNS blocker (which you can just use on your VPN slot via apps like DNSnet, or Server side like Adguard or Mullvad DNS) as a new ROM, complete with Subscription Service and (in the case of E OS) even with non encrypted Backup, essentially begging someone to compromise their Servers and steal peoples Photos and Data.