i'm not conviced any of it helps. they have complete access to any "computer" on the planet. best thing you can do is get an off brand SoC board like one from texas instruments or pine64 and roll your own OS. security through obscurity.
using stuff like VPN redirects your traffic but that itself isn't hard to follow with state level access. onion routing or invisible internet project (i2p) again slows them down, but doesn't stop the eavesdropping by the state.
to securely communicate use gnupg wisely, by generating keys on a machine that never sees the internet (air gapping) and never publishing or transmitting public keys except by thumbdrive/sdcard to another isolated machine.
hardware + routing + encryption will strengthen your security posture, slow down the eavesdropping, and if properly used encryption will secure your messages…. until someone gets a warrant. physical access negates all security.
nothing you do on the internet is secure. encrypted air gapping messages via physical devices is the only way that this anon has found to transmit sensitive information. mail an encrypted sd card to a friend with a similar setup on the other end.
once established it is possible to communicate encrypted messages across the internet but its risky. cross contamination between online and offline hardware leaves open the possibility of exfil from the offline device.