>>2149129>Jason BourneInstall Norton 2006 on your pc.
Then get an unbranded device, they don't have the botnet installed, some chink spyware at most. Use prepaid or cash. Don't look at specs, they're all fake. Tablets is best because many come with extra features, like OTG SD reader support, few phones have this.
First thing to do is factory reset, it gets rid of the "user-friendly" preinstalled bloat. When that's done, root. If it's unbranded, most likely there aren't any one-click root exploits for it, you've to root it from a console using a pc, that's why you should do this before leaving.
When root is done, using your pc download a Firewall APK from F-Droid website, a DNS manager, Fennec browser, an App Uninstaller and F-Droid itself then copy them to the device, install everything. Block all IPs from 0.0.0.0 to 255.255.255.255 using the Firewall and manually add exceptions, like the F-Droid download server address, DNS address and your home Wi-Fi addresses. Change DNS to something like Cloudflare's which claims to be the most private one, that's what I use.
When this is all done, uninstall all default apps that don't break the phone. At this point, install an hardware ID randomizer/faker and connect to your home Wi-Fi to verify that it's working properly checking your router's settings page from your pc. It shows all HWIDs that connected to it. Last but not least, install a Fennec addon to randomize/fake the user-agent.
TOR is banned on most of the chans and sometimes public Wi-Fi spots filter TOR users as well but you can add TOR entry points IPs to your Firewall's whitelist if you absolutely need to use TOR (add 4chan's IPs too).
Installing a custom ROM is safer but the risk of brick is high. Few devices are compatible.
Test all, if all works the device is ready for use, always use public Wi-Fi for connecting to the internet, never use a SIM. You should be safe as long as you don't post many photos online, they're gonna triangulate you otherwise.