OP Here. Thanks for the feedback.
When I started to write the article, I was set to give a list of things we can follow to improve privacy. In the middle, I noticed the arguments why you should do it were not clear. As I said in another comment, it's not clear for my mother the consequences of oversharing, so it's not easy for me to tell her not do do so.
The reality is that it really depends. Maybe you do need to flash your phone and use a VPN or maybe not. It's complex. I work in Cybersecurity and I often get into projects where PMs want magic bullets but there isn't one. Are you processing personal data? Are you going to have legal, financial or reputation implications if you have your data stolen? It's not binary.
The idea is to get the basics right so I can defend to my significant other why she doesn't see ads on Google: it's because pi-hole, honey.
I will come up with the list of things you can do and share it here soon, sorry if you think it's clickbait.