Most US law enforcement ability comes from their subpoena power, so you could presumably stay out of reach of that by limiting your infrastructure to be located

Most US law enforcement ability comes from their subpoena power, so you could presumably stay out of reach of that by limiting your infrastructure to be located in countries without friendly relations with the US. I doubt some babushka's VPS provider in Belarus is going to respond to a subpoena from the FBI. (However, the FBI probably knows this, and they know you know this... so they might purchase a VPS from that same babushka, to spy on the traffic of neighboring hosts via ARP spoofing and similar network-level attacks.) Another area of exposure is payment networks (cryptocurrency or otherwise), so ideally you wouldn't purchase any infrastructure at all. But that's not always feasible. And of course, to be absolutely safe you'd also need to limit your own physical location to countries that don't extradite to the US (and hope they don't sign an extradition treaty before the statute of limitations runs out).