@mcc "use a VPN" solves no actual threat model here, it's just an incantation made up by VPN company marketing
"use a second device" is cumbersome, costly, and in most cases probably doesn't fit with the reason you wanted to install the app in the first place
"use grapheneOS" and similar are pretty high effort and mostly recommended by people who have never actually done this, or the kinds of people who run an ancient ThinkPad with CoreBoot to ward away Intel CSME