If there is a setting to delete advertising ID (somewhere in privacy settings), do that. That will solve the most stuff and there’s not much more you can go. If you disable the ID all other apps dont know who’s data they are collecting, and google will figure out who you are anyway.

I recommend this video from Rob Braxman titled Why an Antivirus Does Nothing for You, just came out recently: https://invidious.flokinet.to/watch?v=mE7CCZCgRB8

For privacy I dont think there is much difference between AOSP based rom and Graphene.

Yes, thats why I dont use cloud and have a degoogled android. The problem is that this is a slippery slope. I can say I dont mind because it doesnt affect me, but step by step they outlaw anything else, even custom roms and alternative app stores. Either people are against it, or this will get much worse down the line.

You go way out of your way to lick Apples boot here. With comparing hashes to whatever Apple wants/is told to, you can profile everyone, find leaked material the gov doesnt want you to have and so on. The fact that people just accept it, or endorse it is beyond me, but again, after the last 3 years I came to the conclusion that most people are scared to be free.

The client side scanning of contents of your phone is the most 1984 thing you will hear.