So turns out Gram is vulnerable to the eMudhra "lets use 4 as our private key" root cert and I've released 3.4.0 to address this:

https://gram-editor.com/posts/release-3.4.0/

I'd encourage everyone to upgrade as soon as possible. Partly so your editor doesn't download things it shouldn't, but also because there have been a lot of improvements and fixes since 3.3.0 so yeah it's a good upgrade in general I hope.

Thank you to Clint from https://getsol.us for letting me know about the vulnerability, I hadn't realized myself.