Don’t use Lineage. It doesn’t even have secure boot. DivestOS would be a better option but keep in mind, there’s no making an end of life phone secure. All you can do is mitigate, like putting a bandaid on a bullet wound.
Tldr save up for a new phone and use DivestOS in the meantime for harm reduction only.