Brave. I keep extensions limited to reduce potential uniqueness. Unfortunately, I do use Linux. Would be nice to modify the fingerprint to be less bespoke, but I haven't taken the time to figure that out.

>Social media

I only use it through web browsers. Apps may be fine, but much harder to trust. GrapheneOS does make me feel better about it, but all the web apps now are great in mobile so it seems fine.

Extreme Privacy by Michael Bazzell[1] is an excellent read on this topic. It provides insight into mostly practical tips and can always be watered down to meet your requirements.

[1]: https://inteltechniques.com/book7.html