Step one should be to install GrapheneOS (or if this isn't Android specific, at least mention it). Don't bother with any other ROM, it's the only one that actually takes security seriously [0].
No mention of alternative app stores that don't require a Google account e.g. F-Droid Aurora Store.
No mention of user profiles for isolating apps.
Browser hardening section is fine.. But I think mentioning Bromite would be a good idea. It's a chrome-based browser with privacy protections and ad-block built in [1].
0: https://grapheneos.org/features (list of security features).