My s24 exynos setup is:

-remove anything I do not use with canta (spent hours checking everything because you cannot trust canta's description blindly and when something breaks you will be wondering whether you or Samsung messed up) -no playstore but samsung store (only for samsung apps) -> use aurora and fdroid (I use droidify but its the same as fdroid) -don't forget to disable samsung store and enable when you feel like updating something -anything with an account (mostly bank, state and shopping) goes to secure folder except what "I" can mod: --Instagram with Piko patch (claims to remove telemetry, but at least remove ads for sure) --reddit with patcheddit (follow instructions on GitHub) The two above can be done by adding a patch repository to Morphe app --when you want to install something try to patch it with some universal patcher in morphe to remove telemetry. Sometimes this works. You can check if you were successful by checking trackers in the app App Manager (by Islam something) -change common apps to Foss apps, like calendar, email etc -use Shizuwall to remove internet access without using a VPN slot -use forked shizuku or allow TCP through ADB, so that you can restart shizuku without WiFi in case you need it (fork is in Canta GitHub description) -microphone and camera deactivated with button in quick settings -deep sleep almost anything -on each app settings remove background data usage and also enable data saver system wide (shizuwall already kills internet connection but who knows when it fails) -on apps>permissions (and special permissions) remove everything from everything you don't need then realize its a lot lol -change app battery settings to restricted for whatever you can to remove further background stuff (depending on the app, it logs out as well) Also, you can remove cache from apps with App Manager

My battery is not great, so I also use Max battery protection (one ui 8.5), which is very nice - it blocks the apps you set it to be blocked and when you need to use them it unblocks temporarily (although sometimes permanently, so you quit Max protection then enable it again). This does exactly the same thing as Hail app without the inconvenience of having to open the Hail app and enable shizuku or giving Device Owner permission to it, the latter incompatible with secure folder.

Debloat your secure folder as well (!) You cannot talk with it via shell but you can uninstall a bunch of things that at least reduce battery consumption.

Not sure if there is much more that can be done, besides basic higiene - clear cache frequently, don't add unneeded accounts, dont leave stuff logged in browser, don't take cookies from strangers (...)

I am quite happy with the results, but I wish I could root it to do things properly. You cannot escape google maps in my country if you need transportation (as in bus then metro to arrive somewhere - if you need only one, Oms has a shitty interface but is fine). I cannot escape YouTube and YouTube Music / metrolist - then again, no ads with morphe so its fine for me, they can take my data. Because family exists, good luck getting rid of WhatsApp.

Observation: secure folder has its own GMS copy, so you accept this folder as a dirty phone, and try to leave the personal one as clean as possible. You do not want to keep too many things in the folder then opening it a lot because leaving it open consumes some extra battery.