All depends on your threat model. As for other posts, Proton VPN is just as solid as Mullvad. What Mullvad offers is sign-up with no email. You can use an anonymous throw-away email with Proton VPN if your threat model requires it. They both accept crypto and cash. The problem with using a solid VPN is they don't make you anonymous. Websites are still picking up info that can be correlated like third party cookies or fingerprinting or cross site scripts or JS. To avoid this you would need to use Tor. Brave helps along with a privacy search engine, but there is so much more that can be done for overall phone/online privacy.
You can also still be SIM swapped even if your phone number is not out there by a rogue cell provider employee, but not generally a big worry. Aurora store is fine if not high threat model, but for high threat model I would only download GitHub APKs for apps - and only use a minimal amount of necessary apps.
Unless the guv is after you or you are committing some serious crimes, your threat model probably goes to data mining/personal info scarfed up and protecting your privacy.
I consider myself medium threat model. If you use the tools in the below privacy guide and stay away from social media/big tech you are in great shape along with a GOS phone. I have no Google apps on my 6a, but for some no big deal putting Google apps in another user profile. All up to you and what you are comfortable with.
https://www.privacyguides.org/en/tools/#email-clients