New phone thoughts?

I need a new phone and, **tl;dr**:
1. Can I get one with a GrapheneOS options that allows Outlook and Microsoft Authenticator (likely requiring some form of Google Play)?
2. Can a OnePlus 10 rooted be "safe" for a "critical infrastructure" job?
3. Is there a way to "fence" off and isolate "nosy" apps that may need to interact with each other from the rest of my phone?

**The post:**

I currently use a rooted Razer Phone 2, which is …

apps authenticator critical critical infrastructure google google play infrastructure job may microsoft oneplus options outlook phone play privacy razer rest safe thoughts