Model your threat and then mitigate it, for example if you are worried about China buy an Intel CPU made in the US, if you are worried about the US buy Huawei g

Model your threat and then mitigate it, for example if you are worried about China buy an Intel CPU made in the US, if you are worried about the US buy Huawei gear. Lets just leave it at you don't posses the budget to make any reasonably legitimate claims about your op sec. If one of your use cases is browsing the internet, you might as well just give up. If they can put stuxnet on Iranian PLCs you're fucked, however, in reality no one really gives a shit about what porn you might be watching or whatever other irrelevant activities you might be doing.