LineageOS neither updates the binary blobs nor does it correctly implement secureboot and they don't backport all security updates correctly.