My solution is to VPN everything out of country. Not a single packet exits without going through a double hop VPN, with both hops being outside the Fourteen Eyes.

On top of that I run an ad/tracking blocking DNS server that’s updated pretty frequently.