I pretty much always use a VPN these days because I hate Comcast and don’t like them seeing my traffic. I like nextDNS because it gives me centralized management and filtering of DNS for all my devices, it’s definitely worth the $20 a year. I forgot to mention I also have the extensions CanvasBlocker, WebRTC Blocker, and LocalCDN but I think it is likely just ublock origin (and nextDNS filtering) that got my score to 96%.
Same, or use the fingerprint reader.