By far the most important difference is that with CalyxOS, you can relock the bootloader. This means that probably one of the most important security features, verified boot, works on CalyxOS, but not on Lineage.