According to the Graphene OS website, the main issue isn't even that. It's that you can't relock the boot loader on almost any device other than a Pixel. That leaves a huge security hole on the phone, and it's one that almost all rooted users of other phones have open, whether they realize it or not.