Everyone should use a VPN. If nothing else it stops your telecom from being able to turn over every site you visit to the authorities upon request.
Mullvad is generally the recommendation for a general use VPN.
PIA is useful for the dedicated VPN feature. That allows the establishment of a persistent IP to tie to a distinct persona. Hosting your own VPN on a server paid for via Monero is a better choice but setup is more difficult.
Surfshark is an alright choice if you are running a low threat model simply because it supports unlimited devices, so you can just cram it on anything you don't need better for.
Orbot is the most secure but is slow.