IMO.. satoshi is an anonymous group, not a real person. if he is a real person we can track him because even if he uses VPN or Tor network when he exchanges his Bitcoin for fiat money on the exchange, his identity will be found out because on average the exchange tracks the identity of the owner of Bitcoin who has a large amount..
Don't forget that P2P exchanges exist... Also, even if satoshi is an anonymous group how does that change the fact that measures have to be taken anyways to not leak the informations of that presumed "group" ?
5.VPNs are OK,but use a paid one.
I may add that even if it's a paid one, VPNs have to be choosen carefully because some of them (paid) are known to have logged AND given user's information when asked by authorities.