I ended up just installing OpenVPN client and using my existing PIA VPN subscription. You can gain a lot of metadata MITMing DNS queries...