The most secure phone today is a Google Pixel running GrapheneOS
blog.alcazarsec.com
blog.alcazarsec.com
I think they are trying to fix this with Accrescent. I've always heard to use Droid-ify for open-source apps, and Aurora for apps that are only in the Play Store (it uses its own Google accounts as a proxy).