Stock android, vpn based firewall so you can block traffic in/out, camera notification notification, app firewalls to look for app communication, virus/root sca

Stock android, vpn based firewall so you can block traffic in/out, camera notification notification, app firewalls to look for app communication, virus/root scanner. You can also degoogle the phone, turn off all sync, and use a fake google account just for app updates. Lock down 3rd party apps. Then turn off everything you can in options on that phone, if you can root it, apk remove/freeze apps. I de-googled, de-amazon'ed my phone, removed all accounts except google, and no longer use apps, i use a browser. (Except spotify/yt, because I listen to podcasts more than anything else.) 2FA on everything.