although true, so do such levels of security on most devices/OSs.

if you want this level of security on any device, it isn't by default-- even with GrapheneOS, you have to go to the trouble of actually installing it-- or go to the trouble of finding a device that actually comes pre-installed with it, which your local mobile provider does not sell

the point being that, for more than bog-standard security, some level of effort by the user will, yes, be required.