Anything 8th gen and later would be best, as those models support MTE which is a huge security feature not present on 6th or 7th gen hardware.

Our recommended devices can be found here:

https://grapheneos.org/faq#recommended-devices