The social contract only works when content providers choose an ad network that doesn't serve deceptive, misleading or outright malicious ads. I'd rather protect myself than be polite.
linux distro with full disk encryption, unique password for every site (self managed), nextcloud provider + cryptomator for cloud storage, opensnitch or similar for firewall, agressive ad/tracker blocking at dns and browser level, lineageos for mobile devices, preference foss software, pirate all media, mullivad vpn sometimes
I feel like this is just capialising on people's privacy and security fears.
Helm provides an offsite backup anyway, so why not just use a NextCloud provider + Cryptomator?
And email is a nightmare to self host and maintain, especially for a primary address. If you need real secure communication just use something other than email.