Oh I forgot, browser extensions can actually do more harm than good. Several years ago I used Ghostery bu found out they sell data to advertisers, so I changed to disconnect.me.
But eventually I grew sick of extensions, and these days Opera browser (Chromium engine just like Chrome) has built-in VPN and built-in ad blocker.
I've been in talks with Opennic that they would bring ad blocking to some of they're servers, dunno what's gonna happen with that they are so against _any_ type of censorship. But doing ad blocking on cloud/dns level is much more hmmm efficient than doing it at end user side.
One can also install ad blocker to one's router.
BitLocker is easily openable by police/intelligence MS provides means for them, but surely I use Windows 10 ~ I just love it
Change BitLocker to VeraCrypt (or Jetico BestCrypt if can afford (cracks might breach app security), VeraCrypt is Open source, easy to use and has heaps of features far greater than "BitLocker"...https://veracrypt.codeplex.com/
Then, TPM should really be called non-TPM, but VeraCrypt has features for full OS encryption as well.