- DD-WRT

+ openWRT

Other than that is as good as it can get.

* Use a wireguard VPN

* Have your own personal VPN that connects to your router at home so that you can use the external VPN while away.

* VPN can only get you so far. Use Tor whenever possible, specially for low brandwidth tasks.