I think that GrapheneOS could really benefit from some small options to tweak the system, such as fonts and emoji. Root bypasses the security model, so reducing the need to rely on root would be a good harm reduction strategy. Sort of like how sandboxed Google Play Services reduces the harm for people who need to rely on it. Maybe even upstream could accept it.