The compatibility definition document for Android gets it pretty secure, but realistically the only secure Android devices are Pixels in my opinion.