Yes, "fully safe" is not possible. And we cant just throw around random third party projects. Like, I am sure Vanadium is secure. But I have no idea who develops many third party apps.
It is up to you to choose. Android and GrapheneOS restrict apps a lot. There are also checks, for example on F-Droid, where many apps get rejected after a code review.
But in the end you always need trust.