On the android side (Advanced Protection), but yes I do, for both account and device. I’m currently running the stock OS after a few years of graphene, and the things I’m most worried about AP now covers (most important, USB data access if my device is seperated from my person). Had it not been an option, I’d still be replacing the stock system.

I’m not a high value target, but I have had people attempt to attack me and my accounts, and there is almost no downside (for the account side, you need a physical security key; for the device side, sideloading takes a couple more steps and reboots). Being someone that uses the same username almost everywhere makes it easy for others to connect with me, but also makes tracking and attacking me dead-simple. I also use my phone heavily, from medication tracking to to-do lists and reminders, emails and banking; and I figure I’m already using crazy-long passwords, MFA, siloing my data under my own control… why wouldn’t I take advantage of more security?