Also to note, Proton AG is technically for-profit. They are majority owned by Proton, which is a non-profit, but the company that hosts everything is technically for-profit.
What about Lineage gives you more control than GOS? I personally have never tried LineageOS since I have a pixel, but curious what it's like over there.
I don't mean to say that running / installing Qubes or Whonix is difficult per se, as a matter of fact I use both on my main machine, rather it's not very intuitive to set up as, and likely far beyond the threatmodel of, someone brand new to privacy.
That is quite unnecessarily extreme for any threat model. Even if we ignore your bringing of a thermonuclear bomb to this metaphorical fist fight, most social media sites block Tor and require a lot of PII to even begin consuming content, so you'd probably be better off practicing self control and avoiding those sites entirely.
If you're using a third-party email client, but using a gmail email address, then PGP would stop Google from reading your emails (assuming the private keys aren't compromised).
If you're using their email client, then nothing stops them from decrypting your emails if they really wanted to. IIRC, gmail doesn't natively support PGP anyways though, so you'd have to use a third-party client.
Reject Convience does privacy policy reading streams, and has a pretty hard stance on no TLDRs. If you don't have time to watch it, save it for later. Better that than to trust a random person's 5 word TLDR.
Is DeleteMe.org real? Looks too good to not be a data stealing scam.
Also to note, Proton AG is technically for-profit. They are majority owned by Proton, which is a non-profit, but the company that hosts everything is technically for-profit.