Since I need to run a few apps that won’t work on LineageOS (because dumb developer security stance), I need to buy a “regular” android device that includes all the google “services”.
Ideally, it should be a cheap second-hand phone that will still receive security updates for a long time.
Are there bands that are better (well, “less worse”) than others from a privacy perspective?
Pixels are your best bet. You could also flash GrapheneOS onto it ans use it with the Sandboxed Google Play Services