I prefer https://privacy.sexy/ - it generates a script that I can read/edit.
I probably still won’t trust it on a critical system without a reputable audit though, I think I’d still prefer to either trust Microsoft or Apple or go run OpenBSD or Linux instead.