LineageOS is not really designed with security and privacy in mind, it is built in debug mode and It is used because it has the widest device support of the AOSP distros.
I would recommend looking into CalyxOS or GrapheneOS if you have a google pixel- it's ironically the only phone that is supported because google is pretty open with the firmware (it's designed with AOSP/stock android in mind) and allows you to re-lock the secure boot.
Yeah, the privacy features went down the toilet with the removal of Privacy Guard. The stuff they replaced it with, Trust, doesn't seem to do anything... I just took a look at GrapheneOS, seemed cool, maybe I'll try it.
reply