

WhatsApp is the big one, that shit is a proven vulnerability. It was literally the vector for zero click access to Android devices in the Pegasus toolkit.
One way around it is to have a separate device for WhatsApp itself, then use WhatsApp4Web from F-Droid. It’s basically a web wrapper for the browser version of WhatsApp, but it does run somewhat independently of the main WhatsApp device (unlike eg Threema where the website won’t work unless the device has internet).
I torrent on my media PC and stream from there.