Verified boot and hardware attestation enable verifying a GrapheneOS install is genuine. It can't prevent all hardware tampering but it provides very strong protection against tampering with any firmware or software.