It's the only option. It's either that or give up. Look at Android. It's honestly a piece of shit but at least we were in control. Well, not anymore: now apps can use remote attestation to see if you "tampered" with your own device. So you're not in control anymore because if you exercise that control you get locked out of every service. Hell my fucking bank's app complains and refuses to run if I have developer mode turned on. Might as well choose the better kept garden if it's gonna be like this.

I decided to buy a Pixel and run GrapheneOS because I literally can't live without Termux anymore but I definitely understand your point.