Plus a LOT of security features, wich are rather in the inners of the system. There’s no “security options” because optional security is not security. GOS is security by design.

I recommend reading this: https://github.com/Peter-Easton/GrapheneOS-Knowledge/blob/master/GrapheneOS-Security-Q%26A.md