Use only Nostr relays with NIP-04 encryption support and DM encryption always works.

(Not all Nostr clients support encryption.)

You can use Tor or VPN or Tor + VPN or Tor + VPN + PGP + DM encryption.