It has gone over 4 years without updates the firmware, kernel, drivers and HALs. That includes many critical vulnerabilities usable to take over the device remotely or from an app. It's also essential...
LineageOS won't provide those hardware-related patches. It has a significantly weakened security models and delayed patches even on a supported Pixel. That makes little difference on a Pixel 3a since the userspace AOSP patches don't matter more than the missing kernel patches. It has an end-of-life Linux kernel with barely anything backported.
It would still have remotely exploitable radio vulnerabilities even with Linux 6.18 with full rewrites of the drivers.
It would still have remotely exploitable radio vulnerabilities even with Linux 6.18 with full rewrites of the drivers.
1