Comment by throwaway9d0291

I'd go even further and recommend GrapheneOS [0] on a Pixel.

It has some extra security improvements on top of AOSP and most importantly, the builds are signed and the device can be locked after you install the ROM.

[0]: https://grapheneos.org/