Imo debloating the apps itself is not possible. To do that, you would need to somehow decomplie them, change the code, repackage them and install them as custom applications. This might be possible in theory, but is not feasible in a real-world scenario.
I recommend the following two options:
- Use different clients where possible. For youtube F-Droid has some alternatives. For reddit I don’t know the current status.
- Use a VPN based solution such as AdAway. It can block requests based on target IP or Domain. But keep in mind that blocking certain requests can prevent the app from working.
If privacy is your concern, then I’d use two different mail addresses / domains. One with your “professional” TLD (mail@johndoe.com) and one wirh your privacy focussed TLD (mail@anon.com).
You say that you want to do this for “privacy” and “security” reasons. Those two are not the same. What is the exact use-case which you want to prevent?
Disabling WebSockets will cause some Websites not to work properly anymore. Especially such which rely on live updates without reloading the site (most common use-case for WebSockets).