GrapheneOS requires fs-verity for out-of-band system component updates since our previous release:
https://grapheneos.org/releases#2023012500
This is part of our ongoing verified boot improvements to fix massive flaws we've discovered in the standard Android verified boot which largely break it.