But, as with other flavors, you'll pretty much have to use the Google Services to get your apps working (notifications etc.)

Indeed, the problem is far from solved, but there is hope. Some apps can already be replaced:

https://prism-break.org/en/categories/android/

Where does it state CyanogenMod is privacy focused or even privacy orientated?

For example, it has Privacy Guard by default, does not send any info to the mothership, gives you the control over your device, etc: https://wiki.cyanogenmod.org/w/Why_Mod%3F.

Another small discussion saying it fits for privacy-oriented users:

https://forum.cyanogenmod.org/topic/28109-cyanogenmod-from-a...

Thanks. I didn't see anything on their website to say they are focused on increasing security but maybe its not one of their main goals. I'll read into the links you posted. Cheers.

AOSP