https://wiki.lineageos.org/devices/

It's not Graphene secure, but it does get google off your phone and support more models than graphene. If the primary concern is the device price and you can't go with an old pixel that is still being supported by graphene for a while, I'd at least go with something that can run lineage (and you may get lucky and find your current cheaper phone is already supported.)

For the apps you're required to use, Graphene has a separate profile feature that has no knowledge of your main system, you can install those apps there. I'm unsure if Lineage has a similar feature, if not then having a separate phone for those apps is basically your only other option, unfortunately. Maybe "find a new job that respects your privacy" but that's even less practical, they barely respect their own privacy much less ours. Or legislation against privacy invasive tech, but you might as well pray for it with all the good that'll do because that's never happening, they're actually going the other way with that (looking at you, eu chat control).