Each person's risks and needs are different.
A government official with top secret information.
A corporate executive concerned about corporate spies.
A politician.
A reporter in a foreign country
Someone coordinating a protest under an authoritarian government.
A drug dealer.
The person with winners names for the emmies
The average person logging into their bank.
Finding a recipe stored on a website that requires a log in.
How dangerous is the information? Who is likely to be looking? What's the risk?
If you have different id/pwds, going to that recipe site exposes you to very little.
If you are arranging to sell illegal drugs, there could be a court order that would expose that.
If you are a politician, thousands of individuals want to crack your system.
A dissident may have an entrie government working against them.
If you were worried about law enforcement, or corporate spies, or an entire government going after you, you would probably not be posting your question here and would already know this.
The Electronic Freedom Foundation has some good informatioin for you to determine the right level of protection. They have a link (that I always have trouble finding) to https://www.safetydetectives.com/about-us/
This looks at different VPNs znd can help you decide wihich is best.
One person is protecting themself from someone stealing an id/pwd. Another needs to be concerned about law enforcement or the entire government