The lead here seems to be GrapheneOS. I haven't looked into this deeply enough either but as I understand it you buy a stock Pixel 6 or 7 and then install.