We don't include these carrier apps in GrapheneOS. However, this particular claimed vulnerability isn't a real security issue. The other Verizon apps do add sig

We don't include these carrier apps in GrapheneOS. However, this particular claimed vulnerability isn't a real security issue. The other Verizon apps do add significant attack surface and give them control they shouldn't really have. They're only active on the stock OS when using a Verizon SIM though. GrapheneOS does massively improve privacy and security, but these apps aren't a problem if you aren't using Verizon SIM and even then the retail demo app is not remote attack surface.