I find it to be pretty reasonable, and also consistent with what GrapheneOS previously said. They were consistently against company-owned verification. I don't see anything offensive here: they aren't attacking individuals or projects, but rather attacking an approach that is harmful.

That's because Unified Attestation is unsalvageable. It's basically the same scam as Google's, with different owners doing (or wanting to do) the extortion.