Internet anonymity might be a temporary defence, until AI doxing analysis improves or one's government decides to change their rules (good luck securing against that).

I don't have any crypto: firstly because I lack the opsec skills. Also because I travel to other countries, and the best defense is to actually not have anything worth being stolen (or limited financial exposure e.g. my physical wallet was stolen last time I was in Brazil).

People immensely more skilled than I will ever be, still have security failures (e.g. Troy Hunt fell for a phishing attack recently).