Most people buy a VPN first and call it privacy. Wrong order: encrypted email, then a password manager with aliases, then the VPN, then encrypted DNS. A VPN protecting an account tied to your real name isn't doing much.