If this is a concern for you, I recommend that you enable Tor in the Bitcoin Core settings.
I don't know about Windows (I think it's easier on Linux), but on Linux the steps to run Bitcoin Core over Tor are as linked below:
Setting up a Tor hidden serviceTOR SUPPORT IN BITCOIN
15. Bitcoin over Tor[video] - This tutorial helped me a lot
Is it possible for a bad actor to work out where my node is located, thus making me a target for physical burglary?
By default, Ubuntu is secure enough (assuming you're not specifically targeted by someone with tons of resources). Even Ubuntu help page only mention very common advice[3]. If you don't want your IP address known by other full node and any website you visit, VPN should be good enough. But take note some some VPN provider doesn't take privacy seriously.
For his purpose, it doesn't matter if the VPN takes privacy seriously or retains logs. In any case, his real IP will be hidden. He can go with any of the current top VPN providers and it will suffice for this use case.
No need for VPN, just enable TOR.