Personally I hear it had been a mixed bag. Hopefully time has refined this… Old stories about digging up old LOS images, bare minimal patches, and release under e branding with no consideration for security/hardening. Buuut that was info from a grapheneos vs eos forum, or something. Do your research, you know what sub you’re in.