Graphene argues that Google's device verification systems could lock users into approved hardware and software.