Might sound a bit of a silly question. I see people talking about threat models, and privacy guides which say things like “if this is part of your threat model, do X Y Z”. I’m just not sure if it’s a general “this is what I want to protect myself against” or if there’s more to it.
I look at more of how much privacy do I want and what am I willing to give up to get it.
The more you try and keep your data private the less user friendly things tend to get. You need to find a balance that suits you while satisfying your main privacy concerns.
But staying away from “big tech” as much as you can and using a good VPN (Proton or Mullvad) is a MUST for any threat model.
I gave up on my first attempt to go fully private because I tried to go as far as is possible. Now I have struck what I think is a good balance. No iCloud, No Google and absolutley no Facebook, Twitter or Reddit.