Ironically, the best phones to do that are Google's own Pixels - to give credit where it's due, at least the phones have unlockable bootloaders (unless you buy the Verizon variants).

eg GrapheneOS currently only supports Pixel 2, 3 and 3a:

https://grapheneos.org/releases