Cool

For bloatware, this is what I use if you have access to adb https://github.com/Universal-Debloater-Alliance/universal-android-debloater-next-generation/

As for privacy, I cant think of any approach for base roms aside from piping your connection through a vpn that screens every IP or domain from that device whatever it reaches to. Unfortunately, I dont know any vpn that could do that.