CM11 is very good stuff. PrivacyGuard strikes an excellent balance in the too-much vs. not-enough controls department. I'm currently running CM11 on my Nexus 7 (2013 + LTE) tablet, and stock Android on my Nexus 5 phone and switching back and forth is seamless.

Curiously, if you want to run the latest Android build on the Nexus 7 tablet, you have to go with CM (or some other 3rd party thing). Google is still a release behind, for whatever reason, but only on the LTE variant of the tablet.