Google’s Sideloading Crackdown: Why It’s a Threat to Everyone’s Privacy and Freedom
(the.unknown-universe.co.uk)
it's got an open source base layer; but it's got enough closed source layers on top of it to make the open source part alone useless for today's mobile environment.
nevertheless, the things like graphene, lineage, postmarket, etc. are efforts to make that base layer effective and they will soon be your only options if you want to use android without having to provide your gov't issue ID so that your actions can be tracked for "terrorism"