Custom ROM scene is too sketchy. People install random shit on their phones, eyes wide shut. I’d suggest sticking with Pixel phones. You can use Google’s flash station to install aosp roms if you so desire, it’s safer than whatever is out there on XDA forums.

Having a work profile on the phone leaves you with no privacy. Your admin has near unrestricted access to all you store on the phone.

So I’d stick with a separate phone for work altogether. You can expense it in most companies.