Just a general suggestion here, as a first step, do some diagrams of your environment. Start with a general diagram and work from the top down to more specifics. Consider what goes into like buckets of use cases, and where use cases are different. All this vlan & firewall talk is downstream of design intent.

You can use the Google Play app store if you want; or you can use alternate app stores like F-Droid, Aptiode, Accressent, or probably some other thing I’ve never heard of.

Start moving to LineageOS or GrapheneOS now. Plan your next phone purchase on a model supporting one of these. eBay a used phone if you have to. Get out.

There is no appeasing these loons. The “Bro” IDS system had to change it’s name a few years back because…no one even knows.

From an end user perspective, there’s nothing to learn.