Allowlisting GrapheneOS's AVB keys does not meaningfully achieve 2, see https://news.ycombinator.com/item?id=48732675

It would be a win for GrapeheneOS users though, so I hope they do get support.