It doesn’t. You get exactly the same protections on Graphine OS with Fdroid. It’s just difficult to retroactively sandbox applications on the desktop because it’s a breaking change.
Mobile platforms just got a clean slate to implement a new security model.
Why is it this particular form of 'malware protection' always seems to involve a 30% fee?