They have web app but had terrible experience with it (can't find devices when you are using the mobile app and the other device is using the web app).
Your question doesn't make sense, GrapheneOS said that they prefer spending their time implementing and fixing security issues rather than things that can be easily changed from open source offerings. See https://news.ycombinator.com/item?id=47247778.
Framework. vPro Enterprise Framework devices actually meet HSI level 4, but they unfortunately do not handle firmware updates properly. They have not shipped a single firmware for their 13th generation over a year since its release date, and over 6 months since the disclosure of LogoFail. While they do ship some updates for other devices, how they have been handling so far is not acceptable if you need a secure device.
VPN's DNS server from reputable service from here https://www.privacyguides.org/en/vpn/. I should have tried visiting this website using Tor browser too at that time, archive.today doesn't even load for me right now using my VPN...
But windows will always introduce more telemetry tracking and Recall. If you want to have privacy and not be surveilled by Microsoft/Windows, use Linux.
They are one of the least "deGoogled" ROMs out there[1]. If you want the only real "deGoogled" OS that prioritizes security and privacy, use GrapheneOS https://grapheneos.org/.
Are there any projects that generates random traffic? Like a website where you have it open it keeps sending random traffic. It will make traffic analysis very hard.
A guard discovery attack allows attackers to determine the guard relay of a Tor client. The hidden service protocol provides an attack vector for a guard discovery attack since anyone can force an HS to construct a 3-hop circuit to a relay, and repeat this process until one of the adversary's middle relays eventually ends up chosen in a circuit. These attacks are also possible to perform against clients, by causing an application to make repeated connections to multiple unique onion services.