Remove the ability for your phone to get "apps" from an "app store" - the same ability allows a remote party full and unilateral access to your device without your consent nor knowledge. GrapheneOS is a great start if this reality bothers you.