@iquitsmoking Update checks use the standard JobScheduler which spreads out the checks. Update checks are every 6 hours with the full default flex up to 12h.
Debian barely has software versions are frozen for years and doesn't have fully automated updates. They're also fine with using a huge number of sketchy third party mirrors and don't care about having privacy for which software people are using including mostly not using HTTPS due to package signing. It's not really a similar situation.
@greg_harvey Edited:
It seems they're based in France which we're currently trying to avoid due to major hostility from French national law enforcement and their government towards end-to-end encryption and secure devices. French law enforcement specifically targeted GrapheneOS with fearmongering and spread it in a bunch of the French media. They're trying to make it seem as if GrapheneOS is for criminals and are trying to justify taking action against us so we don't want to bne involved there.