I like to make sure all the apps on my phone are setup the way I like. Ban most from running in background, disallow from accessing services especially in the background. Adblocking services, etc. I use my phone alot for work, so rocking some custom OS in not an option.

Firewall rules, use of many networks & vlans, and different ssids for different type of wifi traffic. Make for a secure home.