Pixels get verified boot and bootloader relocking for custom roms like grapheneos as well, so you can be sure your device isn’t compromised even with a privacy respecting custom rom. I guess this is what most people refer to… Oh, and Pixels are probably going to get security patches for the kernel as well as the vendor blobs unlike many other vendors…

I hate being forced to use this crap

For security, disabling the root account is important, so be sure to add --no-preserve-root on the end!

I’m not English native and I often see Google ads in my language. Many of them are of very low quality and some ads connect to phishing links, weird apps or cover contents. I don’t think Google strictly restrict them…