[dmm]

> which excludes Google APIs completely

lineageos and calyxos should as well, unless you opt-in. I guess they would still use the google captive portal detection? Is that what you're referring to?

> and is additionally hardened down to its memory allocation implementation

That's really interesting. Do you use GrapheneOS? Is it easy to lock the bootloader on Pixel devices?