Changelly, but I have heard some bad rumors recently about them, freezing some money, but not sure how much truth is behind that, do the fact checks for yourself. Cake Wallet also has some decent exchanges built in.
how bad is the opsec if you go from BTC-> XMR on cake wallet using your phone, then transfer to your monero Tor wallet. Sorry if thats a dumb question im trying to learn.