When I travel my information department gives me a totally fresh loaner laptop that can only connect to a remote desktop session using two factor. When the laptop is returned its totally wiped and never plugged into internal networks.
For telephones I usually take a old beater pixel phone and put Calyxos (I usually use GOS) on it with multiple VPNS (mullvad + riseup + corporate wireguard). I use CalyxOS because I can share the VPN over tethering which is super useful when traveling.
The burner phone has its own temporary email, I forward any documents needed for entry to the phone itself for local copies.
- Load esim
- Load Taxiapps
- Install (but not logged in) password manager
Messaging apps is where it gets hard, you kinda need them, but they are tied to identity and a backlog of keys.