Per their own releases, they includes October’s AOSP security patches.

This is pretty good, but still behind GrapheneOS in terms of security.

(I did a quick search, so I could be wrong)

Edit: Oct patches were included on a release from 1 week ago