What they're doing in regards to the environment and paying their workers fair wages (throughout the entire supply chain) is great - unfortunately their security practices aren't. I think buying a Pixel second hand is the best option, it also saves you some money. You already get extended security updates by using GrapheneOS, as they provide full OS updates for the entire period in which Google supplies (firmware) security updates (which tends to be a few years more than they provide Android feature updates. e.g. the Pixel 6a gets 3 years of feature updates but 5 years of security updates. GrapheneOS provides feature updates for the full 5 years).