Hacker News Reader

I quite like Shelter [1]. Shelter apps are installed in a separate work profile, which essentially sandboxes it from the rest of your data. It also has a neat feature to automatically disable (freeze) specific apps and seamlessly re-enable them when you launch them through Shelter.

[1] https://github.com/achalmgucker/Shelter

It seems that the repository has moved to https://gitea.angry.im/PeterCxy/Shelter/.

Every app is sandboxed by default.

Secure Folders on Samsung. Multiple user profiles on Pixels/AOSP.

Separate grapheneos accounts for everything does that I believe

I went with a separate non-critical phone when I had to communicate on WeChat.

This is what I do too. If i need to use or test something i don't trust then I use an old phone. All of the phones use crDroid(1) and I have scripts to quickly wipe and reinstall the OS whenever I need a full nuke.

(1) https://crdroid.net/