You can buy a Pixel 9 with GrapheneOS preinstalled from here: https://shop.nitrokey.com/shop/nitrophone-5-723

I have no relationship with Nitrokey but they seem to be a legit open-source company in Germany, with a github account. I do run GrapheneOS and I recommend it. GrapheneOS is fully open source (from the kernel up) and free of google services in the default install. No "spam" IMO, but it does notify you when a security update is installed (which requires a reboot).