I was finally able to critically think about my threat model and the top three things that could impact me the most is federal government (surprise to no one), malicious actors (think randsomware attack, criminals, botnets), and content owners.

Next step according to EFF is to figure out how much I care to protect against them.

One note, advertising was at the bottom (not Google's sharing with government but standalone was low for me)