First of all, I live in Europe and I'm not concerned with targeting attacks or people trying to uncover my identity. I'm just a guy that doesn't do anything illegal or risky and I don't expect anyone to go after me. What I want is to protect myself against passive attacks as much as possible such as malware, data breaches, and all the other attacks that aren't targeted toward me.
I want to protect my data from service providers, mass surveillance, and surveillance capitalism, or at least make it not worth it to track me. Basically, I don't want to have a permanent record of everything that I do on the internet.
So what should I do? Which tools should I pick? Where do I start this journey?