lmao. You said you can't help with ente.io so you clearly haven't testes all services, but yeah sure, recommend something. Very objective. (Nothing against immich itself, I used it myself and liked it.)
I tried CalyxOS but as that doesn't support android auto (I get the why but really need it for navigation). Therefore I switched to LineageOS but my banking app didn't work there (or rather I needed to configure the OS every time I made an update so that the banking app doesn't detect my device as rooted) so I switched all the way back to stock.
Now that GrapheneOS sent this toot yesterday, I'm waiting for them to support Android Auto and hope that my banking app also works there :)
I use my password manager. Better than not using totp but more convenient than another app and no sync between devices. I use a yubico for everything that has to do with money