This is about work phones. You're not going to [be able or permitted to] install LineageOS, GrapheneOS, or anything like that on it. And you shouldn't.

What you should do is turn the thing off and put it in a shielding bag when you're not working. Or leave it in your desk, locker, or whatever. Or even refuse getting one to begin with.