Cybersecurity

You’re doing just fine then! I’d look into hardened Firefox configurations and I’d probably honestly reduce what you’re all doing with email. It’s a bit redundant - to have three customizations to what’s essentially one experience.

Your browser will be fine 99% of the time with script blockers like umatrix, config hardening, not using chrome/chromium. So using protons web interface is probably just fine. Even then, emails usually not too crazy for the average user in terms of risk either, besides it being a focal point for pivoting off of (use different emails for different areas you want to segment and keep using that manager software (passwords, accounts etc)

Keepass is free and works great to secure your stuff

Can you explain why?

If you share internet you definitely need a vpn. Anyone who can log into the router can see your exact internet history. Depending on the exact situation you can also set up vlans, but only if the other person cant just simply disable them at the end point (router). Maybe you can setup your own router behind the current one with a build-in always-on vpn.

Custom email aliases and password managers are great just in case one account gets hacked they cant just use that account to log into other sites.

Viruses, just don't click on suspect links, check for phising etc in emails, harden your browser by blocking JavaScript as much is possible without it breaking the websites. And don't use windows, since most viruses target that. Linux and Mac are less targeted and have better build in security.

And update all your stuff regularly, even things like router firmware.

Oh and don't attach iot products to the internet, those usually have terrible security and can be used to break into your network. Block them in the router (again, having your own router helps) and preferably put then on their own vlan.

Eventually you will notice a patern of which ones are needed for basic function (the domain your on, wp.com, squarespace and sometimes google.com) i just switch them to trusted or if they can track temp trusted.

Sometime im also lazy and turn most to temp trusted but if i have time i work out the important ones.

I find it really distrustful that my doctors site uses many trackers.

Also, Proton is actually only end-to-end encrypted when emailing other proton email addresses

— … Here's a short list of what I've done, but I'm wondering if I'm missing anything important: …

— what OS are you on?

— Windows

i think you've found something important that you're missing

It would be a good idea to explore Linux if you care about all the telemetry Windows collects. There are distros out there that are so user friendly that someone using Windows their entire life can hit the ground running, like Linux Mint.