completely protect is a no, All u can do Put a decent antivirus on your phone and maybe something like no root firewall
and perhaps use next DNS , and after that hope for the best the best.
Keep a copy elsewhere. Keep an additional backup away from the main device. A drive in the same bag can be lost or damaged in the same incident as the laptop.