Degoogled Android is just as possible. There are nearly all the tools needed (apart from system level stuff like backups) that work without many privileges or with a fine grained permission system
Never said that, but its security allows you to use random stuff and not fear malware. GrapheneOS just does the last % to complete it, like storage and contact scopes.