cuckflared So there aren't many things that we can safely rely upon and no solutions on the horizon.
Right now there is no magic "security spell" (or "privacy spell") that solves all issues if only one can find out what it is. But then again there is no single medicine that cures all kinds of cancer.
There are steps one can take to improve security and/or privacy, but each of those steps requires time, effort, inconvenience, and/or money. For example, one can refuse to run popular gigantic information-harvesting apps ... but they are popular, so one's friends and family, or one's job, might request or require some of those apps. One might purchase a separate dedicated device for each one of those apps one decides to run, but that's expensive and may be inconvenient.
Edit: there are things on the horizon. Maybe running each Android app inside a Microdroid VM would help. Perhaps the CHERI processor architecture extensions will be shipped in a mainstream phone processor (which would be an upgrade from the research implementation).