Ahh so if I understand what you're saying, it's not "these" operating systems such as specifically naming GrapheneOS in particular or suggesting these may/may not be intentional but your position is you do not trust any hardware or software as they ALL have exploits and vulnerabilities.
Have I got that right?