GrapheneOS is the way to go, unfortunately the 5a won’t be supported by Google for much longer, only until August of this year. GrapheneOS will probably provide a few extra months of extended support though.