Also like Derek states, you don't really want to be using these devices as a daily driver due to then running older android versions which can be an attack vector.

A secure WiFi connection then run obtanium on for some foss apps without login credentials, a decent browser and Nostr client with npub watch only login in my opinion is ok. But depends obviously on threat model.