opsec is easier then you think.

deep honesty. ALL YOU NEED IS A FUNCTIONAL BRAIN to have opsec and know the factors of simple security and privacy. 

first step, install OPNsense on your router , start a proxy chain thru installing a mullvad wireguard in your router , then install mullvad on your OS and keep it on all times.

second step, libreboot or coreboot ( removes intel ME  ) 

third step, load up qubes. and install pgp , i2p 

that simple 

or js get a librem 14 like big opsec boss edward snowden. its like 3k$.