I have my own unmanaged VPS running debian. I’ve set it up as SOCKS proxy and have configured my firefox to always connect to that only through a SSH tunnel. Hence all traffic that originates from my firefox is secure. And hopefully i’ve hardened my VPS as well.