In my opinion, it’s enough to buy a subscription to a good VPN, which does not save logs, and does not significantly reduce your speed, and of course it does not steal your traffic.
In addition, you can install the extension blocking ads and scripts in your browser. This will be quite enough to remain anonymous on the network, and at the same time have an easy and quick connection to the network.
VPN is a must as a first layer of protection but thinking it is enough is a common mistake.
if you're googling something logged in your account it is already not private.
if you use the same email in more than one website
if you don't use an adblock and allow cookies on your browser it'll also track you for target ads (which can be usefull but can also be scary).
of course, most of the people dont need deep level of protection but those who work on activism, as an example, should really protect themselves, we know what government can do with people that question their shady activities.