I guess the latest one being officially supported would be the best option. Newer Pixels often implement Hardware-based security features which werent available on older ones, where the hardware could be vulnerable to forensics.

This is at least what they describe on their website.

The "best" depends on your definition of being the "best", though.