decent suggestion, specially the Linux one (lol).

I don't think there is a perfect answer, every case is different, the opsec in her case since she is so worried needs education, she needs to learn more about cyber security, information is power, once she learns she will be able to adjust her opsec to her comfort level