Consider if you truly need root on your device because its more of a risk then a benefit in most cases these days. Most features that used to require root no longer do or have more secure alternatives

Another consideration is that while you can buy a phone with grapheneos preinstalled, it’s much better if you take the time to do the web install yourself because anyone selling preinstalled phones could potentially be a honeypot.

Pixels don’t include bloat other than google, installing grapheneos is a simple and easy process you can do from your browser, unfortunately that’s about the only truely secure option available currently any other devices (ie fairphone) will be a trade off of less/slower security updates and/or lack of ability to relock the bootloader.