GrapheneOS is the top tier option but it only runs on Pixel phones because they have the most secure hardware. Other than GrapheneOS, definitely look into CalyxOS and LineageOS. Also, if Verizon is your carrier you’ll need another device as they lock users out of the OEM Unlocker needed to change the OS.