Now to be fair, most people's threat model is far more pointed at global megacorporations hoovering up their data and selling it to the highest budder, not the police or malicious actors trying to compromise their device, and most malware is merely annoying and not particularly life-threatening, so if you truly don't care about security because you don't engage in activities that mean you need to be concerned about targeted attempts to compromise your privacy, then going with better privacy and worse security might be worth it. In which case a regular Android phone with Lineage or Calyx might be fine.
My problem with this logic is that it essentially relies on the same old "if you aren't doing anything wrong then you don't have to worry about surveillance" argument. You're saying that you're not worried about your device being easy to compromise and have all your data and interactions stolen and monitored simply because you're not doing anything right now that might entice someone to actually do that. But I think at some point most right thinking good people are going to end up at odds with the oligarchic fascist capitalist hell hole that we live in... And also, as I'm sure you can tell by now, I think that
**If You Don't Have Security Then You Ultimately Don't Have Privacy Either**
because a lack of security means that it's extremely easy for your privacy to be compromised! So yes, switching to deGoogled Android might mean that your data isn't guaranteed to be given away to Google, but it means that your data is almost definitely being given to the government and probably to basically anyone who takes an interest in it anyway. It's like putting blinds on your windows but not locking your door: your data isn't getting out by default sure, but it's very easy to get it out.