I might bite the bullet, and buy a Pixel tablet, to flash it with GrapheneOS. Lineage OS tablet support is pretty spotty lately. I use a Samsung SM-T720 that is doing well, but will die eventually.
GrapheneOS are sticking to Google hardware for security features and upstream support. I'd rather wish for a maximum privacy platform that doesn't leak anything to Google. I'm currently not aware of anything like that.