Don’t use Lineage. It doesn’t even have secure boot. DivestOS would be a better option but keep in mind, there’s no making an end of life phone secure. All you can do is mitigate, like putting a bandaid on a bullet wound.
Tldr save up for a new phone and use DivestOS in the meantime for harm reduction only.
I feel like a broken record at this point, but putting LineageOS on it still doesn’t fix the issue of no driver and firmware updates and you sacrifice secure boot, which makes the whole thing not worth it imo.
At least go for DivestOS which does support secure boot whenever possible. Even then, there’s no making an end of life phone secure. You can only do harm reduction.