This is what I do, my DD is setup with grapehene and has NO apps on it that use personal logins or email sign-in (google, YouTube music, all bank apps, personal social media, etc).

All those apps are on an old pixel 4a with calyx that doesn't run on a vpn, is simply my normie doxxed phone.

This has worked great for me + its amazing how often I was checking my gmail, etc. for no reason other than habit.