I've been using privateinternetaccess - as advertised here - for months. (Found it before they started advertising, though, but thank them for covering the masturbator adverts.)
They accept gift cards, so I went to one of the places that gets the best value according to their website, paid cash for a card, signed in for it at a coffee shop the first time, and travel a fair bit so sign ins are from everywhere.
Seems to have done the trick. Had one or two small issues early on that gave me cause for pause, but feel better about it all now.
Of course, don't assume that it's complete protection. And, have never signed in for any of my IRL passwords from this second user setup I keep on my laptop.
DON'T ASSUME THAT IT'S COMPLETE PROTECTION.
But again, it seems to have helped.