The main point is not that usets of GrapheneOS are directly affected. If they communicate with any other user who has a device affected by device side scanning, all pricacy is then lost.