> Pinephone with a personally audited Linux distro?

Even if you don't personally audit it, you still benefit from other people doing it. Especially if the software is reproducible (and many packages are).