> what should anyone who even vaguely suspects state sponsored spying do?

They should keep their phone in Lockdown mode [1]. It's less useful as a computer in that case but the restrictions reduce the attack surface.

1. https://support.apple.com/en-us/HT212650