2 phones:

One you keep inside your home network, a Pixel with #GrapheneOS, (WiFi only) guarded by home network hardware Protectli firewall with always-on VPN, no mobile connection EVER.

The other, a travel phone (Pixel + GrapheneOS), always-on VPN, connecting to #Calyx hotspot, turning it on and off ~5 miles from your home at the same random location EVERY TIME. No exceptions.