If you are talking to someone who is not currently using:

* A password manager
* MFA on most or all accounts that allow it
* An up to date operating system on all of their devices

Please stop yourself from recommending:

* A VPN
* Tor
* Tails (or any variations/equivalents)

Just… rewind a bit and help with the first items first.

@hrefna
Or ask them (and listen) why some of the first items possibly are really bad ideas.
@flexi @hrefna
Not a bad idea per se, but MFA with the phone number is a security advantage, but with anti-privacy consequences since it allows tracking user accross multiple accounts/services.
Totp or email are great but not so many offer this choice.