Currently I am on a Pixel 5a with Graphene, but it has been out of support for some time and I'm considering the move to Lineage for this device. I severely limit what I do on it, and also have a background in network and device security so I'm able to monitor my device in a way that I feel I can hold out longer with out of support devices than I would advise for the general populous.

Graphene themselves say that with a 5a you are unprotected in case your device gets into the wrong hands.