If you can, get one direct from google because they come carrier unlocked so you can immediately upgrade to GrapheneOS.

Or used

I made the mistake and got mine via upgrade, and have had to wait until I pay it off to change OSs