I guess a second hand pixel with Graphene os maybe?

I assume you wouldn't have to worry much about it. Except for google shenanigans w.r.t. third party app stores.