Our upcoming release has hardware memory tagging enabled unconditionally on devices supporting it to replace the opt-in we added in security settings. This will likely be released at the end of the day tomorrow.
See https://grapheneos.social/@GrapheneOS/111338677911401250 on our implementation.