[defensive7132]

"most aggressive attackers as my threat model"

So, government agency? My vote would go for live USB Tails on librebooted ThinkPad. Use only public wifi. Always consider if your actions can be correlated and lead back to you or hint at you.

P.s. consider using wokfi

Good luck, space cowboy!