For Nexus phones there's CopperheadOS [1], a hardened Android version focused on security. It sounds great but I haven't tried it. It's also nice that they try to upstream some of their work.

[1]: https://copperhead.co/android/