Ok, privately i use relatively little email. I only use webmail, so there the browser is the line of defense
I am also not signed up to all that many services, the most important would be Paypal and Amazon (since those have access to my bank account) and of course the email service itself.
I agree about Chrome. I recently read report about increasing Chrome errors about "Unsafe Ports". Whatever makes a port unsafe :p It hides to much, and it is sad to see that Firefox always seems to try to copy Chrome.
I currently use Firefox, and except for uBlock, i have no addons enabled. uBlock also does not have that "acceptable ads" crap that Adblocker has.
I know what software i have installed on my computer. Much of it is just for gaming, for example the Steam client, which is one of the few things i actually have in autostart.
Regarding productivity software, i mostly use open source, except for Office 365, which was just too cheap to not get it, if you can share a famility subscription with more than 3 people.
I do not use any online banking at all. My important passwords are in KeePass, without Browser integration, the less important stuff is in the Firefox keystore (with Master password) as well. And yes, some of them by now have been flagged by the HaveIBeenPwned collaboration that Firefox does. I am aware, i dont't really care about those crappy accounts that i have not used in many years anyway. That i don't use the same password on multiple sites should be obvious.
Windows telemetry and fluff (Cortana, online search, and who knows what else) is as far disabled as i can do this on Win 10 Pro, without affecting Windows Update. Security Updates are installed automatically, Feature Upgrades are *not*. I regularly check the telemetry settings with O&O Shutup 10. Yes, third party, but the tool is fully portable and does not install.
My daily runner account is not and admin account.
I have no inbound rules allowed in my router firewall, no port forwardings, and my provider does not even support IPv6, so there is no way to directly access my computer or any other device on my network from the outside. The firmware of the router is kept up to date, this is my own device and not a locked down one from a provider. There are no Alexas or general server dependent "Internet of Shit" devices on the network.
I know that this is not 100% safe. Simply *nothing* is 100% safe, except a cut cable. There always can be 0day vulnerabilities. I believe i know what i am doing though to get a reasonably safe home network, without too much effort.
I already have to keep up with all this crap at work, so "good enough" is good enough for my home network :p
*sheesh* What a ramble... I think i need to dig out the "Old man yells at cloud" meme again.