Private Space.

I think it’s a pretty new feature, but it seems to do what you want.

Use a phone that encrypts the user partition, which is any recent Android phone.

Also don’t enable file and storage permissions for any apps.

Cryptomator is pretty standard