It's the other way round.

If the device is sufficiently secure, it will be considered for the official support from GrapheneOS.

Of course, GOS can be forked by anyone, including Chinese OEM with insecure hardware.