Not damaging their relationship with Google as a vendor most likely. For better or worse, GrapheneOS is depend on Android which is controlled by Google.
The researcher who discovered the bug is not affiliated with Graphene
The researcher who discovered the bug is not affiliated with Graphene