What data is collected and by who? Please elaborate what you mean by this, and in what way Google is more trustworthy than GOS. If you mean by the mere fact that Google is a company and therefore has laws and a reputation to maintain then I agree.
Graphene OS has pioneered many security improvements, some of which Lineage, AOSP, and Calyx have borrowed.