Fwiw, I use a Pixel phone that was online with Android only long enough to unlock the bootloader. Then GrapheneOS, ProtonVPN, Signal, ProtonMail, Fdroid, and the Aurora store. And should it get cracked, they would discover they did a whole lot of work for nothing. Same thing with the Pixel tablet on which I'm writing this now.
dep Pictures: http://www.ipernity.com/doc/depscribe/album Column: https://ofb.biz/author/dep/