Protonvpn also blocks ads, trackers, malware. With some of my apps needing google play services, I get trackers block constantly on my grapheneos phone.

Edit: I would also mention that I am very selective with my permissions. I don’t grant internet unless absolutely required. Sensors and gyro data are very rarely needed for apps unless it’s navigation. Location permission only for when app is open, nothing in the background. Microphone and camera permission the same too. Though, for proprietary apps that need mic and cam like social media, expect them to watch your face and listen to you all the time, extracting every muscle twitch and word that comes out your mouth.