Just filed an EU DMA complaint against Alphabet for gatekeeping against secure Android derivatives like @GrapheneOS via Play Integrity.
TL;DR: not certified ≠not secure. Google lacks a FRAND certification process for non-OEMs that comply with objective security requirements.