Graphene, at least in its current state, is dependent on Google continuing to allow Pixel phone bootloader's to be unlocked and relocked after a new OS is installed, and is dependent on Google for receiving timely upstream security update patches as well. Given Google's current direction my guess is that both these things might be threatened in the future.