I'm pretty confident that by most metrics custom ROMs are less compromised than OEM ROMs. It will have less malwares, I better sandboxing, less 3P backdoors , more up-to-date security updates.

1P here being the user/owner of the device