Some grapheneos is open source, you can build your own rom that includes whatever features you would typically need root for. Implementing those features at the system level is far more secure than giving the user account root access.