There's a very interesting thing going on with this: what they mean is, Android location requests go through the location API provider on the phone, and Android phones the US is familiar with are content to roll with Google's location API

LineageOS ships with Google’s location services. Plus, Google has changed the way that third-party location services have to be installed in Android. Now, they have to be installed as a system app, not as a normal app. This requires knowledge of how to use the command line over ADB, and you also have to install some special files that allow your custom-installed location services to survive system upgrades.

So, I have Mozilla location services running on my LineageOS phone instead of Google’s, but only because I'm that tiny minority of nerds who knows how to do all that. Ordinary people might prefer to simply install MicroG’s fork of LineageOS, which avoids Google outright and provides third-party location services.

Lineage breaks the Android security model.

I'd use GrapheneOS where possible. Consider making it possible where it's not.