As long as it depends on Google paying upstream development that GrapheneOS updates from, it is tied to Google.
Now if GrapheneOS was its own thing without additional AOSP code updates.
This becomes sophistry, though. "tied to" in a way that doesn't matter, doesn't matter.
This becomes sophistry, though. "tied to" in a way that doesn't matter, doesn't matter.