Updates are conducted without trust between the device and the server.

Since trust is not needed between the device and the server, updates work well over VPNs and Tor.

GrapheneOS is not able to comply with a government order to ship an update to a specific device because of the trustless server to device relationship.