To add: never sign into anything important, like messaging/personal email/cloud storage accounts, etc, on the travel phone. And run a VPN regardless.
I also get a local "pay-as-you-go" SIM card whenever I travel, rather than use my at-home SIM. This might be verging on paranoia, but if nothing else, it usually reduces data/roaming costs.