What measures can be taken to protect our devices from commercial spy apps?

I am referring to the type that are marketed to crazy spouses for example mspy

I am not referring to pegasus as that is outside my threat model

What can we do?

BTW I use grapheneos if it matters

apps commercial devices pegasus privacy protect spy taken threat threat model