Pixel 5 is end-of-life and shouldn't be used anymore due to lack of security patches for firmware and drivers.
I understand if your friend is on a budget and simply can't afford a non EOL phone but, they should really consider a 6th gen Pixel or better if they care at all about their data security.
Umm one question by the way , why use Google phone to degoogle? There are plenty of good Android phones out there right?
The Pixel 5 is not much more expensive and is still a great phone with good battery life and good camera, and the last Pixel small enough to used one-handed. It also has wireless charging which is missing on the 4a.
If your friend isn't gaming or doing anything CPU-intensive the P5 is what I would reccommend today. Everything afterwords has been an incremental upgrade for significantly more money.
Pixel 4a was one of the last in the Google lineup with a headphone jack (5a being last). The OEM lost its way after that. This enough to not recommend their devices as far as I am concerned.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
much thanks to @gary_host_laptop for the logo design :)