I’m not expert but for the sake of getting some discussion going:
Don’t open ports on your router to expose services to the open internet.
Use a vpn when torrenting and make sure your torrent client is set to only use the vpn’s network adapter. This way, if your vpn drops out the torrent client can’t reach the internet.
I keep everything local and use Tailscale to access things while I’m away from home.
Same. It’s simple and straightforward and I think it only asked me if I wanted to pay for their extra service 1 time. I’m not sure if it’s income based but it didn’t cost us anything to do a federal return.