You can do that with low-end hardware and LineageOS or some other custom ROM. The pixel/GrapheneOS combo is pretty much the most secure that I know of, but it's not the cheapest hardware to acquire.