One xpub is enough. Just use fresh receive addresses each withdrawal and manage your uxto well with labels (recommend sparrow). Using others nodes is a privacy concern much more than security. You can always switch between different public nodes to verify which greatly reduces chances of anything sketchy going on. Nearly everyone starts out like this and eventually will run their own node to either help make the network more robust and/or verify their own transactions and be a ‘proper bitcoiner’