They suck at privacy, and they are indeed relatively new to hardware game, but I'd say they are better at security than you think, on par or even better than Apple. Like Apple SoC, it has a dedicated security chip. The new Pixel 8 even implements Memory Tagging Extension, which iPhone doesn't yet have. And they do all this while allowing you to install third party rom. It's how projects like GrapheneOS can exist.
They have security flaws that are 20 years old that could be solved by an 8 year old.