I love LineageOS, but using it still doesn't prevent OS-level privacy/attack vectors like the recent "report cell tower location despite location services being off" mishap/invasion. (1)

Yes, Android is open source, but at the end of the day Google is the dominant contributor, so you're still subject to their will... (just like Chromium)

1 https://qz.com/1131515/google-collects-android-users-locatio...