We wouldn’t want any Graphene OS device to fulfill the requirements necessary to be certified. That would make it useless.

‘Rooted’ doesn’t mean rooted, it means the Google API it checks against says no. And is unlikely to say yes on any device that isn’t ‘official Android’, with Google Apps having System access.

This really, really doesn’t matter. Government agencies procure new vehicles all the time. The actual harm he and the administration he’s part of cause is important, not the brand of car they buy.