pre-paid in-person non-KYC sim (or KYC-free Bitcoin, etc), used device and IMEI, VPN, offshore secure email, de-Googled Android ROM, apk installs, and separation of use works