Truth. Its a big problem.
I have exactly 21 apps on this phone, and all of them open source.
Minimalism and greater commitment to separation of data and executable code is my preferred solution.
HTML browser for cat videos.
Payment app for paying for cat food.
Camera app for photos of cats.
Some game engine for games about being a cat.
Termux with SSH for actual important stuff.
Minimum privileges for all. Install from signed repo.
Android isn't a bad design, really.
Content creators are clueless, programmers are lazy, and users are impatient risk-takers.