You are correct. "Most".

Run Libre GNU/Linux with the Libre Kernel. Not that bullshit proprietary stuff by Linux Torvalds. His garbage NSA componenets have been removed by the FSF.

Use a Libre browser too., fully auditable code. Dont touch anything else.