To add to other replies GrapheneOS also provides USB-C exploit protection at hardware level.