Ask HN: Best way to use Android securely?

In particular, I'm referring to the top comment in this thread: https://news.ycombinator.com/item?id=13516116 where the iPhone is recommended as the best secure option. For those of us who are too deep into the Android ecosystem[1] are there any best practices or measures that can be taken for Android to be more secure? I mean aside from the other items on that list and things like disabling fingerprint identification.

Are there any custom Android ROMs that offer comparable security to the iPhone?

I guess it might be helpful to add I'm using a Nexus 5X with the stock Android from Google - version 7.1.1

1. I'm not keen on re-buying a bunch of apps, plus I hated being forced to sync through iTunes back when I had an iPhone 3G, not sure if that's an issue anymore though.