Privacy setup in one evening
Install a reputable password manager, turn on disk encryption where available, pick a privacy-oriented browser, and enable DNS-over-HTTPS or a trusted resolver—then revisit VPNs once you understand what they do and do not hide.