Tuta sucks, they deleted an acct of mine for inactivity, then when I went to replace it they flagged the new one for manual review and said “this addr cannot send mail until the review clears, please reach out to our support team using the email we just said can’t send email for some reason.” I went with Disroot.

GrapheneOS is super easy to install, they have a walkthrough on their site.