LoveSausage

It's only an attack surface minimation , security is better on new generations. I use all since I am in the middle of nowhere. If you don't need it disable it, otherwise let it be

Proton riseup and calyx comes to mind.

I used adguard.dns before now I have VPN that have DNS filter. Disabling 2-3g minimize attack surface but just a small thing use 3 g if you need it. You can use both private DNA in settings and a free VPN if you want.

Start with the basics. Use a VPN preferable a good one payed in crypto /XMR or cash. Use Foss apps only check out F-droid.

Also one that blocks malware and ads. If not use adguard.dns or other that filter traffic

Settings , disable 2-3 G if you always have access to 4-5 G .

Don't change add browsers use vanadium. No gapps obviously.

The more challenging is to just use it as WiFi phone without SIM.

You should probably mention your jurisdiction ,but I'm in EU and have a Dacia , pretty goood lack of stupid/unnecessary features and the console is mostly optional to use. Physical buttons for important stuff and music/calls. Mine is a LPG/gasoline hybrid but most is similar to the EV models.

Least bad in Mozillas privacy review as well. Plenty of electronics still ofc it is needed in any car today EV or not.

You can run any distro you like on it , but peppermint is is my favourite. Everything you need and nothing you don't.