iodéOS greatly rolls back privacy and security compared to the Android Open Source Project. It lags far behind on privacy/security patches and protections. It isn't a reasonably safe option and doesn't provide what it's marketed as doing.
The badness enumeration approach you're talking about doesn't protect against the most privacy invasive behaviors by apps and services. It's easy to bypass and increasingly doesn't work. There are also better open source implementations for free.