3 ms·

You are supposed to (and GrapheneOS prompts you to) relock the bootloader immediately after installation of the new OS.