Most "hacking" on phones is due to compromised email and other accounts. Make sure you have strong, unique passwords on all your accounts, as well as two-factor/multi-factor authentication (2FA/MFA).
If you don't want to pay for malware protection or internet security services, turn on account security under settings > security and privacy.
