On choosing the machine where the real work happens.

the phone is not the workshop

I run GrapheneOS. No SIM. No eSIM. Radios off by default. By most measures, it is the most hardened daily-carry phone you can run outside of a classified environment. And it is still, at its core, a communication device. It responds. It receives. It fits in a pocket and reacts to the world.

The laptop is something else entirely.