Well, it looks like a very good start.
In order to know what other actions you may have to take, you need to make your own threat model.
If you’re just a person concerned about privacy try to:
- stop using GAFAM services (including google docs cloud etc. except for work)
- always use separate devices for work and personal stuff;
- learn to use “veracrypt” to encrypt sensitive data;
- take a look at standard notes for E2EE private notes;
GL & HF =)