Having a ToS and Privacy Policy is table stakes before you can start accepting payments from customers. With GDPR, CCPA, and all of the rest it is really difficult to create a simple ToS that will satify your customers and keep up with all of the relevant online laws.
There are services out there to help with this (Termly, etc) but they all charge monthly fees just to host these documents and they make it hard to self-host.
How can a bootstrapped startup with no access to legal advice put together a barebones but meaningful ToS/PP without spending too much money?
If you're paying someone for incorporation services, they may have a "starter pack" of standard agreements.
In the past, I've also used templates from this book: https://www.elsevier.com/books/the-it-digital-legal-companio... But I think it's somewhat out of date at this point, unfortunately.
Any legal advice is going to have concerns that are state-specific to where you're doing business. Beware of re-using a template or an agreement from businesses that would be sued in a different place than you would. And if you're actually worried about getting sued, insurance—specifically, an "errors & omissions" policy—is going to provide better protection than anything in your T&C.