I found the Anarcho-Texh security guide helpful in getting started thinking about this with more nuance. I’m including the link below but here’s a short summary
Are you an:
Individual
Journalist
Targeted Activist
Are you annoying:
Random assholes
Assholes with resources
The State
Each category has bigger security needs on one side and more powerful tools on the other. It’s kind of humbling to realize that I’m just an individual and the NSA has no special interest in me, but that makes me feel better using a separate browser without additional security to shop on sites that block a VPN etc
(Also tbh I’m not sure when this page was last updated and I have no involvement with the org. Just a cool resource)