Run a firewall with VPN kill switch and choose non-logs provider. Most the battle won.