GrapheneOS/LineageOS/e/OS is fine. And if I were to choose between ad infested cookie cutter app store and a handful of app crafted specifically for me the choice is really simple.

As for the banking and identity apps, I probably shouldn't be keeping them on my big cool phone that might eventually get stolen.