Replicant

Qualcomm devices are a no-go, sorry.

Why? IIRC, Cyanogenmod supports them.

Please read http://www.replicant.us/freedom-privacy-security-issues.php
Qualcomm devices have poor modem isolation, require many user-space blobs, including firmwares that would make Replicant nearly unusable out of the box and leave no hope for freeing their bootloaders, as they are signed.

I understand your logic, but increasingly there are in the market many cheap $100 Android phones on sale with large screens and otherwise good specs. Not everyone can afford a Samsung Galaxy S4...
Perhaps there's no way to completely or mostly mitigate the lack of freedom or the spying risk in these phones but it's worthwhile to remove what limitations and spying that one can e.g. by (in the case of the L90) Google, LG and Lookout.

Such phones as the L90 and Moto G shouldn't ever be considered fully safe or liberating but a few improvements would be nice to have.
If Cyanogenmod is getting installed on the L90, that proves LG hasn't completely locked it down.

Not everyone can afford a Samsung Galaxy S4...

Most of the devices we support can be bought second hand at a very good price.

Perhaps there's no way to completely or mostly mitigate the lack of freedom or the spying risk in these phones but it's worthwhile to remove what limitations and spying that one can e.g. by (in the case of the L90) Google, LG and Lookout.

Replicant aims to provide software freedom, not to work on removing the few most evident restrictions. That's probably a job that fits best projects like CyanogenMod.

Such phones as the L90 and Moto G shouldn't ever be considered fully safe or liberating but a few improvements would be nice to have.

Well of course! But we only have limited time and resources, so we simply prefer to spend them on better devices that give us better chances of reaching our goal.