You’re a gem, my friend!
And minds think alike — I’ve used precisely that sparrow config in the past, with the addition of a Tor port/proxy (not sure on terminology) but basically running Tor browser in the background and connecting it to sparrow before importing an xpub or broadcasting anything.
The Bitaroo node is another good one, if I recall. Their loading text explicitly states they keep no logs etc. (Of course, it’s a trust game, but at least they’re saying something, ya know?) 🫡
Anyway, I think I may just tell her to set up a proper VPN before we even do any Bitcoin-y stuff. Thank you 💜