I'd say Graphene itself should take the Calyx approach, while encouraging usage of Auditor to ensure there was no tampering (at least at the software level).

But alas, it's easier for Micay to burn bridges than it is to build them.