I too have a 4.4 tablet. It’s basically just for video and YouTube. I disabled all google services, mostly use apps from fdroid, with MiXplorer as an exception. You have to use cloudflare’s F-droid mirror because it still supports old protocols that official repo doesn’t.

MiXplorer to send and receive files with its HTTP server, Skytube for YouTube and Torrent client app for torrents.

It’s also behind an ad/malware blocking DNS, so there’s little safety. I don’t use the browser much but there’s a way to install Lets Encrypt root cert as a custom certificate for browsing sites that use Let’s Encrypt. I used use it for a while and websites will work but you’ll need to setup a lock screen and there’s a warning on every boot. So I removed it.

https://letsencrypt.org/certificates/

Steps: https://www.jucktion.com/lets-encrypt-android-4-4-mitigation