If a VPN isn't sufficient for your threat model, then you need to be using something like Tor, I2P, or Nym.