If you are talking to someone who is not currently using:

* A password manager
* MFA on most or all accounts that allow it
* An up to date operating system on all of their devices

Please stop yourself from recommending:

* A VPN
* Tor
* Tails (or any variations/equivalents)

Just… rewind a bit and help with the first items first.