Our upcoming release has hardware memory tagging enabled unconditionally on devices supporting it to replace the opt-in we added in security settings. This will likely be released at the end of the day tomorrow.

See https://grapheneos.social/@GrapheneOS/111338677911401250 on our implementation.

Our approach enables memory tagging for nearly all of the base OS, user installed apps opting into memory tagging support and user installed apps not bundling any native libraries. For other user installed apps, we'll be adding a per-app memory tagging toggle in a future release.