Thanks for the tips. I haven't installed CyanogenMod because it doesn't support some of my phone's hardware features, but I'll choose my next phone more carefully. Paranoid seems to have an even narrower range of hardware that it supports. I could possibly do some tinkering with either of these to make them work on hardware not already supported. But as with my desktop computer, I'm past the stage where I want to put a lot of effort into that kind of thing - I'm more focused on what I can do WITH my devices than TO them. Also, as far as I've been able to tell, (please correct me if I'm wrong), using Cyanogen or Paranoid still won't address many of the app permissions problems, as many apps won't work when certain permissions are denied, even when those permissions are absolutely not needed for the app to do its job.
As for enabling mass storage and stripping out stuff myself, I've not done very much programming, and learning how to program just so I can have a secure and useful phone seems a bit much. Besides, AFAIK, (and again, please correct me if I'm wrong), most apps are not open source, so I couldn't readily modify them evem if I wanted to do so and had the skills.
My point about FFOS was that it has the potential to be a less toxic ecosystem than Android, with perhaps fewer privacy and security holes baked in.