If you are going to browse this site, do so using a qube with the Whonix Workstation template.
Attached images are found on http://qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/doc/architecture/
Yes, I know, running Qubes is "a lot". But it's the only thing that is reasonably secure thanks to its compartmentalization strategy that is also usable (or usable enough). The other option is to manage BSD Jails and the networking parts, but an interface hasn't been standardized for this. FreeBSD/HardenedBSD is also missing essential ciphers, specifically argon2id for its disk encryption. Linux is very insecure without https://grsecurity.net patches.
The effort on PlagueOS https://0xacab.org/optout/plagueos is also noteworthy, even if done by those with kikefaggot ideology. What a lot of these "anarchists" don't realize is their system hardening work often gets picked up by consultants and packaged to be used by white not-normie-but-not-technical women, basically moms who are in their 50s who learned over the last several years they absolutely can not trust their government and the big technology companies.
Whatever operating systems you use, you do for sure want to secure the means to compile them locally and maintain records of what source code snapshots were used to make which binaries. And, be able to fetch those binaries over a distance, while also having appropriate pieces (such as hardware security module) along with other physical space monitoring to know to trust your personal machine or not. Yes it requires time and effort but it's not hard to maintain and is a major return on investment in the long run.