Yep, since OxygenOS it's a fork and it's also not in the security levels of other forks like LineageOS among others. They have been also caught collecting personally identifiable analytics information just a month ago but eventually rolled back [androidpolice.com]

Yep, not good at all.