I’m confused, Trivalent only supports MV3 and you said you wanted to use it. Also MV3 filtering capabilities can be really strong too:
Also, GrapheneOS’s Vanadium can be accessed with Desktop Mode, and Vanadium appears to meet your security criteria. Since GrapheneOS is a Linux distro, it technically would be something to use