I agree, you should always flash it yourself. Though GrapheneOS does have the Auditor app to attest the integrity of the operating system against another GrapheneOS device. It's always going to be best practice to do it yourself, however.