Very nice, and it's not crazy, just dedicated. I too think it's kinda fun to dig deep into privacy and see how far one can go without affecting personal and professional life (biggest social challenge so far was to be "the one guy" not using WhatsApp at work).
Regarding apps, the most important thing is to not use many apps at all, especially if you can do things in Vanadium or just not do them, period. For everything that needs to be done with apps and services, I look for:
- open source (obviously up to date, good track record and adoption)
- compartmentalization
- permissions as limited as possible
- offline when possible
- aliasing and pseudonyms
- anonymous payment
What I'd add to your ideas (without applying all of them myself):
- Proton might be too centralized, I like to have my eggs in more baskets (mullvad, tuta and bitwarden in my case)
- one alias mail per service, always with a random element to avoid it being guessed
- making use of the many user profiles in GOS
- Strong password manager with salt (added characters only you know and are not saved in Bitwarden) plus 2FA via Aegis or hardware keys
- payment via XMR, in cash/vourchers or at least with a unique credit card (in Europe Revolut is my best bet, privacy.com and mysudo seem to be better where available).
- Try using fake names or just initials when asked for the name on the credit card (works most of the time)
- Use GrapheneOS when possible (Pixel phone or tablet instead of Linux Laptop)
- no Bluetooth, SIM cards, WiFi calling etc., airplane mode always on
- using NewPipe/Libretube, Innertunes, Gadgetbride etc. to work around data collection but still enjoy some art and gadgets.
- Extra phone plus silent.link for times when you really need a true phone number (signal account, banking, some other 2fa stuff)
- Download signal beta and make use of usernames and hiding your phone number
- checking kycnot.me, privacyguides.org and other online resources to discover better apps and services
- for mobile internet, use a GL.iNet Mudi router with blue-merle to randomize the IMEI (illegal in many countries though)
That's my ideas off the top of my head. What's always worth mentioning is to have a good threat model and making sure to not get overwhelmed, stressed or lonely over all the things we learn about security, privacy and anonymity. Compromise where necessary and beneficial for a healthy and happy life and pick your battles effectively. Everyone will have different limits and needs so I'd like to see some more ideas from other forum and GOS users here.