As you said... if you are not going to route a LN ... and just a normal Bitcoin Node, I think the best is to be behind #Tor and if you want with #I2P too, as a way to obfuscate your broadcast. I always use as a reference the excelente tutorial by raspibolt, easy to adapt to any linux distro. https://raspibolt.org/guide/bonus/bitcoin/i2p.html