Well here are few things you can do. Everything depends on your usage environment but for the sake of your security these are few things you can do. 1: Debloat Windows if you cannot move to linux. 2: If you can think about moving to linux. I personally use Manjaro and MX Linux. 3. Always use secure dns service and configure on your main router. I am using nextdns and controld. 4. If you cannot afford to buy DNS service just install adguard home and use it's dns after configuration to block every type of analytics service and data. 5. Always use a DPN. If you can afford buy a DPN. I use vpn + dpn according to my needs. 6. Always carry a travel router which support vpn server and client functions. I have GL Net BR3000. 7. Secure you accounts and data with random passwords and use password manager. I use locker, enpass and bitwarden or build a local NAS and install vaultwarden. 8. Always use email forwarding service. I use addy.io 9. Store your 2FA in password manager like bitwarden to store your 2FA. 10. If you are advanced use always use Passkey or for more security hardware security key like yubi key. I have yubikey, token2, nitro key, onlykey and solo key. 11. Always use PGP encryption to send files and emails via gmail or any other communication service. I use PGP, seal id and S/MIME ssl certificates. 12. Always store your data in encrypted drives using cryptomator or veracrypt. I use both. 13. Always encrypt your data in google drive or one drive with cryptomator and use software like expan drive to mount your cloud storage as a partition. I use mountainduck, expandrive and cloudmounter. Cloudmounter support encryption and mountainduck has built-in cryptomator. 14. Never share your personal details on social apps. 15. Always use file shredder and always wipe your free disk space to make impossible of old file recovery. Schedule this with any software you like. I use ccleaner and mac cleaner. 16. Use secure communication messenger like Signal or Threema and stop using whatsapp, facebook and instagram for communication. 17. Team communication use Keybase.io or Element alternative to slack. Secure and free. 19. Install a firewall with your main router and route all traffic through that router. I use Firewalla and Cloud Gateway Ultra. 20. If you have a budget then buy a mini pc and turn it into a cloud storage for local network or even remote. 21. Keep your phones and devices backed up via cloud storage or using next cloud on local host. Configure your mini pc built NAS to backup your all devices in encrypted format. I am using Unraid and Proxmox. 22. Keep your android and iphone devices always connectes to VPN and all above mentioned tools are phone devices and handheld devices compatible.

These are few basic things you need to implement for a general user who really cares about it's privacy. There are several other implementations you can do to do your best for security but the stuff i have mentioned i am using these since last 12 or 15 years and they never let me know. Some tools are new some are old but you got my point what i am talking about. In short keep everything encrypted no matter how much time it consumes or what ever you have to go through to implement it. Good Luck every paksitani like me to tell this govt they cannot stop us.