I VPN from a new non-five-eyes country each day.
I have no social media accounts.
I’m doing this via googlephone.
How vulnerable is that?
Probably no more vulnerable than a normal internet connection.
But you’re dealing with evil people... you can’t put anything passed them.