yes, they only support devices still supported by Google updates. When a pixel is eol'd, graphene stops supporting the device

I'm unsure about the whether airvpn is owned by fascists but it seems to fit the rest of your criteria and at least on paper is italian

i started using CWA and it has been fantastic. it was the best project for my purposes among the ones i tried (calibre-web, kavita, booklore). Booklore was pretty but not really stable imo

i was also going to suggest opencloud as an option - i'm looking to move my setup from nextcloud to opencloud when i have the time to migrate