Parsh's Samsung Galaxy S8

[Parsh]

OS provisions in use

1. Secure folder
2. Permissions usage monitor
3. Install unknown apps (allowed only for Samsung My Files)
4. Careful when granting Device Admin rights to apps
5. Careful when giving apps permission to Appear On Top (Screen Overlay)
6. Careful when granting Usage Access rights to apps
7. Careful when allowing Accessibility to apps
8. Careful when installing certificates
9. Google smart lock (disabled)
10. Verify apps over USB enabled in Developer Options
11. Have set Mobile Hotspot password (WPA2 PSK)
12. Disabled Background Activity + Background Data access when deemed unnecessary for some apps

Points 4 and 5 are important in preventing ransomware apps from overtaking the device.

More pointers

1. OEM-locked bootloader (default, untampered)
2. Avoiding less rated and less installed utilities from Play Store (for genuinity and privacy concerns)
3. Using VPN for non-secure WiFi Hotspots
4. Important data is manually periodically backed up - in case device gets lost/destroyed
5. Disabled unnecessary in-built apps
6. Removing unused apps periodically (there was a time when I had 250 apps on my phone
7. Blocked Mobile Data access for apps that I believe don't require/shouldn't use it
8. Un-checked multiple options from Google app & Google Assistant (privacy)

Spoiler: Images