@ben_dw Graphene is also the only custom ROM that has you load in custom boot signing keys so that the trusted boot process can begin. On most phones this process only happens with the stock ROM, so having that layer of protection blocks any boot modifications or silent malware from infecting your phone without your knowledge. Basically if someone were to want to modify your phone somehow they’d need to unlock the bootloader again and that would be obvious.