Actually there are not many OSes which you currently can run on Librem 5. They are listed here:
and among them almost certainly PureOS with Phosh is the most secure, because it’s developed by paid developers at a very fast rate. Perhaps when GreapheneOS is ported to Librem 5, it could compete with that.