Bitwarden, Adguard-Home/NextDNS, UBlock Origin, Privacy Badger, Disable Flash, LocalCDN(Replacing Decentraleyes), Selfthosted Paperless-ng and Nextcloud instances for storage and documents with seperate accounts for each family member secured behind authelia with 2FA. Docker-Mail-Server instance with catchall emails for each family member. Enabled 2FA for every sensitive account. Private Selfthosted Wireguard tunnel to access local network services publically (behind a CGNAT network). Non technical family members have been instructed to never use real names while signing up for trivial services online. Guacamole to provide remote assistance when required.