Yeah as another said, any email provider can track you. If your threat model has that as a concern then you should always be logging into your email with a vpn on.
As for GrapheneOS I think the Pixel 8 series is most recommended. MTE was a huge security boost. The staff also says do not get anything lower then a pixel 6 as they are to close to end of life.