GrapheneOS

Hardened Android for Pixel phones, with no Google services unless you install them yourself in a sandbox. It adds its own memory allocator, per-app network permissions and an auto-reboot if the phone stays locked for hours.