There is, in fact, zero hassle. "It just works
"
Also, GrapheneOS updates never remove functionality or battery life.
But yes it only works on supported devices - in related news, iOS does not run on unsupported devices, so what's your point?
I know I can buy an iOS device and get support from the vendor without hoping that some third party will support it out of the kindness of their heart and know that it supports apps from the AppStore.
I can do the same thing with Windows. Microsoft figured this out almost 30 years ago.
Apple just released a security update for the 2013 iPhone 5s earlier this year.