One unlocked Google Pixel with #GrapheneOS installed and two user profiles:
A.
B. Guest - all your online content consumption, social media, Bitcoin stuff, and nym life.
Log out of B when you leave home to encrypt that partition with strong E2EE. This is as effective as turning the phone off.
A should be setup such that, under duress, you aren't worried about granting access to it. B should have VPN with killswitch enabled so you never ever leak your IP. Name user A your name and user B 'Guest'. 6 digit pins on both.
This is how I do it.
nostr:note1fzw3tdf3mf3h96vr2f97qxqs7a3wsr06sserfhstr2scl6rnpyrs8m7yzp