Also, consider a threat model to prevent “privacy fatigue”. Sometimes people implement countermeasures without realizing it doesn’t help them. At least define your privacy concerns and only implement what addresses those.

It sounds ridiculous, but I made this rookie mistake for a year and it was exhausting. Privacy is tough sometimes, but you don’t need everything. I just want to look at cat pictures without google selling my info and using profits to undermine government. Some folks will be executed if they are found dissenting against gov on the Internet. Those are vastly different issues with different countermeasures. Good luck!