Hi, nice and interesting website. While reading through the first bit, I noticed that you regularly criticize the Israel conflicts and I just can't shake the idea that it would be kind of difficult to maintain the content when the situation in the conflict zones might somewhat change/shift. I share the critics and want solely point out that the information on privacy/security hardening will most likely be relevant long term while the conflicts will just end hopefully 'soon'. Let me know if I shall elaborate.

Check out mullvad browser and their VPN. Also who historicaly build it. Tor browser had a huge vulnerability for nearly a year and the intelligence agencies and other shady entities IDed a bunch of people (also political activists).

I read about the webRTC setting, which is important and can leak DNS even when using VPN. AFAIK, when enabled, it can also enable torrent streams which can pose legal problems for the users, who think they use some random streaming page. Did you suggest any VPN besides Tor? You watch (1440p?) youtube how exactly and how slow is it? Because I find it difficult to let go of YouTube but I hate alphabet/meta. Did you mention browser agents and window size? We can randomize some settings to be less recognizable. I find it difficult to navigate the content, so my suggestion is for example to add collapsible footer links at the bottom and maybe a search.

Did you suggest an own DNS resolver/filter like pihole/adguard?

You mentioned fairphone. Do you know about grapheneOS? This is the end game of deggoogled phones. Right now it is only compatible with Google Pixel Phones, solely because they are the only ones having the granularity of control over the hardware. (Chipset makers need to deliver drivers with adequate access/control over it). This will change soon as Motorola will release compatible phones soon to meet the grapheneOS specs.

F-droid is difficult. I know the focus here is privacy, but the APK signatures of the devs get over-written by F-droid. https://privsec.dev/posts/android/f-droid-security-issues/ So what grapheneOS users like me usually do is use the app obtainium and preferably import from github and cross-reference the signature directly. So you access the apps directly from source.

I also like this site: https://www.privacytools.io/