Non-rooted, encrypted device, reactivation lock, unknown sources disabled + Greenify. I do safe browsing and no online payments.