Providing an unlockable bootloader with all of the security features intact for alternate operating systems is part of our hardware requirements. Our main requirements are listed at https://grapheneos.org/faq#future-devices which covers both updates and hardware security features.