Also, GrapheneOS has a collaboration with Motorola and through that gets for instance early access to security patches, and probably other things as well.

Just for clarification (your points are very valid): the GrapheneOS developers have stated on several occasions that they getting embargoed patches from another OEM than Motorola.