I'd go even further and recommend GrapheneOS [0] on a Pixel. It has some extra security improvements on top of AOSP and most importantly, the builds are signed

I'd go even further and recommend GrapheneOS [0] on a Pixel. It has some extra security improvements on top of AOSP and most importantly, the builds are signed and the device can be locked after you install the ROM. [0]: https://grapheneos.org/ https://grapheneos.org/