Those Pixels have options to open bootloader and after flashing custom ROM that is much cleaner (GrapheneOS) to lock it again. Which is currently most secure way to have clean and secure android device.