This. Don't let the perfect be the enemy of the good.

I tend to think you can secure yourself some of the gains without rooting your phone, but it's a lot of twiddling and an ecosystem swap.

I loathe apple, but if you're not ready to dive in, your home devices are where I would start. Routers, modems, home PCs, learn how to set up encryption and redirection to put things behind. Ditch your roomba.

Edit; I did not mean to talk down, sounds like your on that train. Android is linux and adb is awesome (sometimes).

Keepassdx/xc and syncthing have been awesome, rise up has a decent free VPN client for public use in fdroid.