vtez44

Most sites still send domain name in clear text. You can see it in Wireshark or PCAPDroid. You need VPN if you don't want your ISP to see the sites you visit.

https://blog.cloudflare.com/encrypted-client-hello/

Only real threats of Threads federation are EEE and server overload. Not the people from there or privacy. If someone wants to see some content you don't want to see, like some opinion you don't like, they should be able to see it. I don't understand why there would be such list, it would be pure censorship and waste of time. I have heard Threads has a pretty good moderation, so that solves this problem anyway.

I don't get what would defederating with Facebook-federated instances gives you, though.

I'm still using Magisk on LOS 20. Banking app works flawlessly and SafetyNet passes, at least on microg.

You just need to install this module instead of using magiskhide now: https://github.com/kdrag0n/safetynet-fix

If you don't add any CA certificates to your system, use HTTPS-only mode and connect from your own client, there's no easy way for them to see what you do on websites. They can only see what websites you're visiting, packets and the timestamp. Using VPS will be the literally the same, except you have only one server and only you are using it, so you're more fingerprintable.

Depends on your use case, for maximum online privacy you should use Tor Browser on Linux or TailsOS. If you want just to pirate, VPN is usually enough.