Can I ask why not? I don't know which country you are based in, but the majority of ISPs the world over keep tabs on what their customers are doing, which sites they are visiting, etc. Using a VPN which isn't linked to your real identity in any way (and therefore paid for in thoroughly anonymized bitcoin) is a good way to prevent this if you don't want to use Tor.

It is impossible to know which organization are "genuine" and will store your data securely. Once your data is on their servers, you have no idea who has access to it, who they can share it with, the physical security of their servers, the digital security of their servers, how they encrypt it, how they store it, how they transfer it, etc., etc. Even "reputable" companies like Binance and Coinbase have leaked user data. There is always a risk when you complete KYC.