DrJeckyyl
You need a threat model. Pinpoint the things that are possibilities, classify them by probability, importance, etc., note entities and situations that are risks, evaluate protections. This is so important, and too few people realize it. It turns "boogeyman" threats that are often paranoia or general concern into a clear understanding of where your threats are, what the risks are, and what you need to protect. Then what you need becomes clear. Update it regularly.
If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle. -Sun Tsu
Also, generally, use strong passwords, backup data regularly, understand that browsers and email (communication in general) is the most risky part of any normal person's digital life, and PLEASE just be cognizant of what you use computers for (if you don't want it published, don't write it down).