> Buy a cheap unlocked smartphone and run GrapheneOS

Note that this needs to be a Pixel at the moment.