does anyone have general suggestions for phone security?
That's easy: don't trust them, don't add any data you don't want compromised. That includes a dedicated email address for the phone, no banking, only enough crypto for daily spending, no forum accounts, nothing.