Ah yes, the answer to "I would like a reasonable degree of support and security for my phone without having to be a full time sysadmin" is "treat your phone like a 1997 Linux PC project.
I devote significant time to avoiding taking on sysadmin tasks. Just got Frontier Fiber. Had always done my own network admin, but they throw in a couple of routers and I decided it was better to have something they supported than try to make sure I had coverage on every square inch (sorry from USA) of yard. We'll see if I am happy with that choice.