France's cybersecurity agency was previously actively using GrapheneOS. They helped us by auditing our code and submitting bug reports such as this one:
https://github.com/GrapheneOS/hardened_malloc/issues/133
They also made suggestions for security improvements to improve protection against exploits.