This. Don’t let the perfect be the enemy of the good.
I tend to think you can secure yourself some of the gains without rooting your phone, but it’s a lot of twiddling and an ecosystem swap.
I loathe apple, but if you’re not ready to dive in, your home devices are where I would start. Routers, modems, home PCs, learn how to set up encryption and redirection to put things behind. Ditch your roomba.
Edit; I did not mean to talk down, sounds like your on that train. Android is linux and adb is awesome (sometimes).
Keepassdx/xc and syncthing have been awesome, rise up has a decent free VPN client for public use in fdroid.
I use the Debian social contract as an example of the an unmitigated good in open source.
That doesn’t mean the org always live up to it, but that’s partially why there are battles for things like representation inside. I wouldn’t extend the benefit of the doubt to canonical, and I prefer rolling as opposed to security ported updates on my own hardware, but they made what you see possible on the internet in large part because people came together to make a free platform.
The orgs dogmas look like product of a bygone age to be, and changes to environment in software is probably as hostile to their approach as ever. I’m amazed they’re not more dysfunctional just from the outside looking, it’s a rock solid implementation.