I maintain a ROM for primarily older devices, the big feature is automated kernel CVE patching.
My patcher was able to patch the 15 affected devices I support, and I'll have builds up in the next few days.
https://gitlab.com/divested-mobile/divestos-build/-/commit/5...