Pixel 7 (best value) or Pixel 7 Pro (+1 for the camera). You will never regret. #GrapheneOS is a new dimension. Unbeatable in terms of security or privacy. Not to mention the stability. This is the be...
Just make a new profile name it like the following: Junk and install everything what is sketchy there. Any apps in other profiles are protected. I made a separate Play profile where I have Google Play installed. Anyway all the apps are isolated, so unlike with other Android OS here each app is isolated and can't connect/harm/read/write other apps data.