• MFA all accounts that support it
• important accounts use hardware key like Yubikey
• Ditch SMS mfa use Authenticator or hardware key
• custom email aliases (proton have SimpleLogin) use separate email for every account just like password
• change your browsing habits from YouTube instagram twitter to privacy alternatives (there is Firefox plugin Privacy Redirect)
• use separate vm for higher risk browsing or separate computer (tails)
• get VoIP phone number redirect your current phone to VoIP.
• use pre paid phone only for internet and never use it for phone or sms. For more paranoid activate away from home using fake name (Mint mobile for instance doesn’t check if it’s real)
• use phone that was never registered to your name (don’t reuse old phones)
• setup always on VPN on your home on router with killswitch so you never reveal your IP accidentally
• use privacy oriented DNS service

If you into privacy I recommend Extreme Privacy book that goes over many things. The lengths that you go to protect your privacy will depend on your threat model. Privacy is expensive unfortunately.