I love GOS, but let's not delude ourselves.
If you're connected to a cellular network with a bad actor and cracked certs, they are already spying on you. This applies to both America, China, Russia, etc.
The best option you have is obfuscation. Use Pay-as-you go and buy the sims way away from the airport and keep changing them periodically.
Nothing on the internet is secure or truly anonymous for a state actor with unlimited funds.