It’s marked solved, but since OP didn’t post the solution:

-e uses basic regular expressions, where you need to escape the meta-characters ((|)) with a backslash. Alternatively, use extended regex with -E

$ echo a | grep -E "(a|b)"
a
$ echo a | grep -e "\(a\|b\)"
a
$ echo a | grep -e "(a|b)"
$ echo a | grep -E "\(a\|b\)"

The x390/x280 are the same era as these but smaller, so might be a better fit here. The X390 has soldered RAM though, so I’d look for the 16GB version if you can find it (there’s not much of a price difference used)

Graphene OS drops support for devices pretty soon after Google does. It’s not a good idea to buy anything before Pixel 6 to run Graphene OS right now (see https://grapheneos.org/faq#supported-devices)

This will get better going forward since Google is supporting the Pixel phones for much longer (5 years for the Pixel 6/6a onward, 7 years for the newest devices).

DNS = Domain Name System. This is used to lookup an IP address (e.g. 123.234.54.32) from a domain name (e.g. lemmy.ml). A DNS query is one of the first things your computer does when you visit a site.

Plain DNS is unencrypted, which means that anyone with the ability to read your requests (e.g. your ISP) can see the names of sites that you’re visiting.

TLS = Transport Layer Security. This is a protocol that’s used to create an encrypted connection between your device and another one, in this case the DNS server. When this is used, the content of your DNS requests is hidden. Your ISP can still see that you’re talking to the DNS server, but not what you’re saying to it.

TLS also allows your device to cryptographically verify the identity of the DNS server. Without it, someone with the ability to modify your connection could change the responses from the DNS server. That would allow them to send you back the IP address of a server they control, rather than the real servers IP.