* > If GrapheneOS had its own hardware, it would have an immutable root of trust for production phones

Found the comment.

https://old.reddit.com/r/privacytoolsIO/comments/gs4uv7/i_dont_fully_trust_grapheneos/fs4sk7s/

this is about development devices without the fuses flashed to keys (last paragraph)