I do not think signing up for a commercial VPN service is a good plan for improving your security or privacy, nor do I think using Tor Browser is particularly smart. This seems like a security checklist compiled by someone who has read a lot of popular writing about security, but hasn't consulted very much with security people.
By comparison, the Tech Solidarity checklist is the result of a survey of a bunch of different security people and is both generally more sophisticated and sound than this checklist and also manages to be a little shorter (in word count):
By comparison, the Tech Solidarity checklist is the result of a survey of a bunch of different security people and is both generally more sophisticated and sound than this checklist and also manages to be a little shorter (in word count):
https://techsolidarity.org/resources/basic_security.htm