> limit the number of apps ... lower attack surface ... If paranoid While true in general, super apps that do too many things and used by billions (WhatsApp, C

> limit the number of apps ... lower attack surface ... If paranoid While true in general, super apps that do too many things and used by billions (WhatsApp, Chrome, TikTok, Instagram, CleanMaster etc) are big enough of an attack surface already. Defenses (compile-time / runtime memory safety & control flow integrity, media coders/decoders, sandboxes, for example) are getting better & so exploits are getting expensive. > use a different device to access suspicios apps/sites with nothing on it While using different devices is good enough, it requires the end user to maintain strict isolation (and sometimes may require appropriate features from the OS). Using burners is an extreme version of this practice.