GrapheneOS devs should approach the EU for support here in my opinion.
Right about now the EU, or at least many member nations, are very interested in ensuring ability to take ownership of important/critical solutions.
These things i am also against. But there is at the same time an interest in allowing data security and ability to repair, f.x.
I would never suggest an EU led or controlled version, but the EU has many types of resource and overlapping goals I think.
I mean yeah, that's bad, but enemy of my enemy? Asking the EU for something doesn't imply that you endorse everything they do. Also, they've already reached out to the EU, IIRC. (Not sure if that went anywhere.)
As for whether or not the EU can or will help them, I have no idea.
"Experts "deeply concerned" by the EU plan to weaken encryption" https://www.techradar.com/computing/cyber-security/experts-d...