I have two phones which is only because I wouldn't be upset if this phone was stolen or lost or broken unlike my main phone. My travel phone is an older and cheap Google pixel phone on which I installed Graphene. I use it regularly to read books from my local library. I do not bring it with me anywhere other than travel. On this phone I also:

• Do not log into anything other than the library app which uses a random username as the login. No email or anything attached to it beyond my home address.
• Ensure that ADB is NOT enabled.
• Require a pin to unlock the phone. No biometrics alone. Ever.
• Install signal for all communication. Lock it behind a pin that is not my phone unlock pin.
• Any and all files that I create on this device have their exif stripped and are automatically encrypted using automation software then sent to my S3 bucket or home server depending on the nature of the files and their size after I connect to wifi somewhere.
• Transfer my service plan to this device.
• Install apps only from obtanium that are verified to match the hash signatures from the distributor.
• The phones drive is encrypted
• While in line for TSA I turn the phone off to which it will remain until I am at my gate.

I have had issues in the past with TSA and my phone with a "random" search. They requested I unlock my phone. I did not, and requested a warrant and will not speak more than my rights and that I will only speak through legal counsel should they be able to produce a warrant. They searched me and my belongings over the course of a few hours. They can eat my ass.

In addition all of my personal machines including my steam deck and my laptop are also encrypted and secured using FOSS software including Linux as the OS. I have nothing to hide, but I'm also smart enough to not provide them with anything they could twist out of context or use against me.