Share your minimum-viable opsec stack

Not the "I am a journalist in a hostile state" full stack. Just the version normal-paranoid people actually use. Browser, DNS, password manager, messaging. What's overkill, what's missing.