ulveon.net (on derg.social) on Nostr: and as far as I know Graphene offers extremely comprehensive *security* features ...

and as far as I know Graphene offers extremely comprehensive *security* features including idle reboot for bringing phones to BFU, memory hardening (several types), and exploit protection. These are all security improvements that greatly aid in effectively protecting privacy.

As a matter of fact, and exactly as you mention, you cannot exactly have good privacy guarantees without a comprehensive security baseline, which as you also mention, other distros do not have. LineageOS has many privacy protections but they don't incorporate the aforementioned GrapheneOS security features and therefore this weakens their privacy offer.

I don't know, I don't really see where Tuta egregiously mischaracterised Graphene but admittedly I am also not that well versed in the technical improvements of Graphene over AOSP at a code level (I can understand them conceptually, though).