Ubuntu Touch and postmarketOS, like many other Linux-based phone operating systems, have significant security issues.
https://madaidans-insecurities.github.io/linux-phones.html
This article highlights only a small fraction of the critical security issues present in Linux-based mobile systems, with a focus on the Librem 5 (a literal scam) and PureOS. These systems lack essential security features found in modern mobile operating systems like iOS and Android, such as app sandboxing, verified boot, hardware keystores (secure elements), and secure image-based OTA updates.
I don't fundamentally oppose the idea of Linux on smartphones and tablets, but the current implementations are severely lacking in terms of privacy, security, and user experience. While there are developments in the desktop and mobile Linux space, such as immutable/image-based systems and sandboxing technologies like bubblewrap (used in Flatpak), it will take many years before we see modern, private, secure, and user-friendly Linux phones. In the meantime, hardened, degoogled Android-based systems like GrapheneOS are the best option available.