VPN should be enough. Fingerprinting is okay if you have a burner device. No need for extra measures unless you run a dark market or a spy.