GrapheneOS runs only on google pixels. So you could get a used pixe,l 6a or 7a are quite good. Don't know if the series 5 still gets security updates.