Since I need to run a few apps that won’t work on LineageOS (because dumb developer security stance), I need to buy a “regular” android device that includes all the google “services”.
Ideally, it should be a cheap second-hand phone that will still receive security updates for a long time.
Are there bands that are better (well, “less worse”) than others from a privacy perspective?
I highly recommend you use GrapheneOS with Sandboxed Google Play Services, nearly perfect compatibility and much more private and secure than any stock Android