Install VPN
Enable full-disk encryption
Download Signal
Two-factor all the things
Delete old wifi networks
Desactivate wifi auto-connect