it's very minimal ootb and has a better update schedule than 95% of oems (alas)

Any OEM right? Google is the fastest OEM with Pixel and GrapheneOS often rolls out patches earlier than Google (not bound by a monthly schedule + they do embargoed patches when you use the right branch).