If you are considering Nothing, you might as well go for Samsung and uninstall all the bloat from the user profile with adb/UAD. It will at least have a separate secure processor (Knox Vault, IIRC even recent mid-range A5x) and not a TEE that runs on the main CPU and is vulnerable to side-channel attacks. And the SoC (at least if Exynos and I believe the latest Snapdragon 8 Elite) supports MTE, which Samsung is rolling out support for in OneUI 9, etc.
Going from a Pixel to a Nothing Phone is like going from a modern iPhone to an iPhone before the 5s in many ways security-wise (the first iPhone with a secure enclave).
But yeah, despite the hardware issues, Pixel with GrapheneOS is still your best bet for a vanilla, secure Android.