You should also use VPN to encrypt your internet traffic and mask your location. I recommend Windscribe, which also comes with ad, cookie and tracker blocker. Use the voucher "50GBFREE" to get 50GB free per month.

If you really want online privacy, research proxy accounts, and you're IP will masquerade as coming from Iran, Norway, wherever you want. I believe most of them are about $3 USD per month, and it gives you a virtual machine which you log into, then do whatever, browse the net, but most download or carry out various attacks.

I haven't needed this yet, but Western governments are getting to the point of 1984 more by the day.

Keep in mind, nothing gives you absolute security, if you're connected to the Internet. There are some startups, but nothing launched yet that achieves this yet. If an NSA agent (for ex) really wanted to find out what you downloaded through your virtual machine, they'd have at least three methods of finding out with 99% certainty -- just depends on your value as a target. Most fly under the radar.

Linux is a good start.

If on Windows, create an account without elevated permissions. I still commonly see people with user accounts which have administrator privilege.

Use of NoScript, uBlock Origin, Ghostery, and https everywhere (or equivalent for your browser) are all good additions. Don't use Edge or Chrome browser. Even Chromium is suspect.

Disable UPNP on your router. Of course, learn to use a firewall and be aggressive. Block by default and only allow what you know should be around.

Don't use Google's DNS. Don't use your ISP's DNS. Use DNS from multiple providers.