GrapheneOS achieves what it sets out to do — but it’s far from flawless ...