They suck at privacy, and they are indeed relatively new to hardware game, but I'd say they are better at security than you think, on par or even better than Apple. Like Apple SoC, it has a dedicated security chip. The new Pixel 8 even implements Memory Tagging Extension, which iPhone doesn't yet have. And they do all this while allowing you to install third party rom. It's how projects like GrapheneOS can exist.
