You can verify the installation integrity via android attestation, which grapheneos uses