What are the most critical things for a normie to do?

I just woke up to privacy and I'm spiraling a bit. What are the bare minimum first steps I need to take? What I've done already: degoogled my life, sent out deletion requests to the main data brokers, compartmentalized my browsing to different browsers/computers (general/hardened firefox, private/TOR, and sensitive/TailsOS stick), started using cash and stopped using club cards, set up a password manager and 2FA. Anything else critical I should be doing ASAP?

EDIT: a few typos

bare minimum brokers browsers browsing computers critical data data brokers deletion firefox general life main privacy private requests sensitive things tor