I got curious so I did a little bit of digging. They do build on top of the Mer-core, which is Linux. Buuuut.....

Closed source key apps like the keyboard, contacts etc, Closed source UI. Uses a proprietary layer for Android app compatibility, Heavy Chinese investment. And no actual third-party security audits.

Smells like honey.