Comment by tommica

Problem is that you need to buy a new one of them once they do not get updated anymore, and the apps start requiring newer versions of android.

But yes, this seems like the best possible option - also it enables the extra security through clean separation, as long as the phone is dedicated for that use case only.