As you're well aware if you use GrapheneOS, there are a bunch of abandoned AOSP apps which haven't had any active development for years.
Those apps are stuck in the state they were in back in Android 5 or even earlier. Many even regressed. They've had bare minimum maintenance for years which gradually ended upstream.
The issues with those apps include them not being overhauled with privacy and security improvements applied elsewhere. It includes outdated dependencies missing patches.