My current approach is : A used linux flashed thinkpad laptop and pixel phone Thinkpad on isolated network Thinkpad runs mullvad vpn Clawbot on thinkpad Clawbot uses my own Routstr node for private AI Only add what you want bot to access to thinkpad Gives you screen, keys and microphone on device Pixel runs graphene No esim wifi only Marmot chat with clawbot for remote interface