Thank you both! It sounds like GrapheneOS really is going to be my best option for security and privacy combo.
As a follow up question, would it be worth the extra money to get a phone with GrapheneOS already loaded? (I admit the price gives me a bit of sticker shock) Or is installation simple enough I should be able to diy it without totally effing it up?