CISA means they are breaching anyone and everyone's systems.
i don't know what level of paranoia is required but i am now running a security hardened kernel variant on all my systems and assuming that breaches will be attempted, if i somehow have been flagged.
considering that my systems have been fully breached at least twice in the last 18 months or so, i'd say they have already meticulously scanned all my stuff and discovered that i'm a lone nut with a mission to gtfo of their way not fighting tyvm.
but i expect that some other spook agency will attempt to breach me so i'm gonna do my best to make it difficult.
i haven't done it yet but planning to put my browser inside a VM next.
probably next sunday.
also using keepassxc to isolate the browser from my passwords, and using very long, very complex passwords so casual attacks are excluded.