Ask HN: How can I best secure an Android phone?

I'm a long-time iPhone user who has recently been using a Pixel 4a. I've always appreciated that iPhones are "secure by default" (more or less) and I want to replicate that, if possible, on Android. Are there any defaults that I must change, or any dumb settings that put one at risk? I'm having trouble finding up-to-date Android security recommendations from competent sources, that are not just security theater...

Thanks!