Its a hardware thing but its also more complicated. Many manufacturers don’t some of these features because add android does not require it. Even Google’s latest pixel 11 may not have all the security requirements set by grapheneOS. I’d like to see them push for these requires in upstream AOSP. They already have a track record of contributions to upstream AOSP.

For myself I don’t consider NFC payments or the few apps that require device integrity auth. Not everyone falls into this category but a good percentage are. We need more modern open hardware. To the larger software point there is a lot of good Foss software out there even for phones. What we need is a open software center like a flathub that makes them easy to find and deploy.