One unlocked Google Pixel with #GrapheneOS installed and two user profiles:

A. - all the apps you need to interact with IRL friends, family, and work.

B. Guest - all your online content consumption, social media, Bitcoin stuff, and nym life.

Log out of B when you leave home to encrypt that partition with strong E2EE. This is as effective as turning the phone off.

A should be setup such that, under duress, you aren't worried about granting access to it. B should have VPN with killswitch enabled so you never ever leak your IP. Name user A your name and user B 'Guest'. 6 digit pins on both.

This is how I do it.

nostr:note1fzw3tdf3mf3h96vr2f97qxqs7a3wsr06sserfhstr2scl6rnpyrs8m7yzp