tl;dr - For reasons below, I can't get my oem-unlock code for weeks+ from t-mobile, and my old (would-be backup) phone is non-functional. Hoping for advice on what I can lock down / adb-disable, etc until I can install graphene. I've been on privacy distro's for years, so using a fully-google phone for 1.5 months is really disconcerting; but i don't think i have another option!
longtime user of another privacy-focused distro on pixels, since prior to Graphene's addition of multi-user / sandboxed google services. With that in place now, I'm very excited to switch to graphene, timing it as I upgrade. Which I just have, as dropped pixel4a in a hot tub :(
That last point is key, as I do not have a backup phone ATM.
So i now have a pixel6 in hand, bought on promotion from t-mobile. I will be paying it off in full in 2 weeks when my next bill hits (Tmobile said this is required so that the promotion credits (substantial - $500) will "kick in"). BUT even paid off in two weeks, I cannot get an OEM-unlock code until the device has been "active" for > 40days ... I can wait 2 weeks without a phone, i suppose - but not 1.5 months ...
QUESTION: What specifically should I configure / disable / adb on the phone to protect my privacy?
Note: I can easily do without using any google apps** for this time, the only apps I need are proton vpn & email, firefox, syncthing, and organic maps
**except camera I suppose? I have always used firewalled google camera, due to the significant image quality gain.