GrapheneOS has a built in Firewall that doesn't require root privileges. Also, you don't trust the GrapheneOS devs who arguably create one of the most secure operating systems on the planet, which is open source and can be verified by everyone, but you trust Calyx devs who regularly go months without releasing any Android security patches and include highly privileged third party apps in their operating system. Makes a lot of sense.
EpicVision
CalyxOS has pretty bad security. They install F-Droid and microG with root privileges, don't release updates regularly and lack many security features of GrapheneOS.
But it's not completely dead yet, it's just slowly dying.
I like Thunder and Eternity
Yes. Check out this list: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos
GrapheneOS is amazing
Yeah Vultr is great
As far as I can see on their website, they don't mention end to end encryption or zero-knowledge encryption. If that is true, it means that they are able to read all your emails (and so can the government if they order them to reveal the data). They sometimes use some pretty confusing marketing slag in general. It's misleading because they advertise things like in-transit TLS encryption, which is standard nowadays. Even Gmail, Outlook, iCloud, Yahoo and other mainstream email providers have this by default. This is nothing special and they hope that people think it means the same as E2EE. If you care about data ownership, you should also care about (end-to-end) encryption. Only when you are the only key holder, you can be sure that no one can access your private stuff.
Switzerland seems like a nice place