On Android I use a two fisted approach; Chrome for things that require auth/payments, Kiwi for everything else. Kiwi is an open source fork of Chrome, and it allows extensions. Unfortunately it's not up to date to the latest (secure) Chrome, but I accept that because not having control over the browser is its own form of exploit.