~then on the internet side you just use TOR -> VPN and you're fine
Before doing that, you should read
TorPlusVPN. It explains why this isn't necessarily the best approach.
So this means that we must also find people who are willing to maintain privacy-enhancing services and then also find other people who are willing to fund them to continue the maintenance of such software.
And keep them safe from, for instance, governments running enough Tor (exit) nodes to be able to analyze data. When I started with crypto, most exchanges and casinos were just "free for all", now they either went full geoblocking and KYC, or disappeared. I don't expect privacy online to get better any time soon.