Use only Nostr relays with NIP-04 encryption support and DM encryption always works.

(Not all Nostr clients support encryption.)

You can use Tor or VPN or Tor + VPN or Tor + VPN + PGP + DM encryption.

https://github.com/nostr-protocol/nips/blob/master/04.md