Was not clear to me if GrapheneOS did something to block a newly-discovered exploit.

Seems more like "GrapheneOS is resistant to newly-discovered RCE exploit thanks to memory tagging".