I'm far from a security expert, but I also have direct security expertise, and from the way you talk, I am highly confident that there are a lot of things you don't know you don't know and I think you've failed to imagine the wealth of information available to institutional powers.
The original MS Blaster writer was found because Microsoft uploaded a memory dump when the author was creating their proof of concept. Room 641a is the connection based data reception we know about. Snowden's PRISM showed a high level of corporate government intelligence collusion. Pegasus is generally considered an intelligence "I win" button.
Compromising someone's security is not a matter of ability, it is purely a matter of resources and will, and as the ruling regime changes from protecting rights, to protecting itself, the "will" for invasive mass surveillance will become much much stronger and your ability to remain anonymous will wane into nothingness. Corporations will increasingly have little choice but to compromise their users.
In your list of security features you listed a what's what of "social media" based security offerings/"solutions" in which the security providers "profit" from you believing they provide security.
Tor was compromised. Matrix is Europe wanting their own messaging platform. Bitcoin is literally profitable for providers, I don't think it's generally considered private, and mostly it's a hedge against inflation based theft. Your browser directly betrays large amounts of information and finger printing is largely considered doable regardless of your configuration, which makes VPN's questionable security, not to mention there are whole lock down configurations required and many browsers upload browsing history to the cloud by default. Torrent is very not private.
If you haven't heard the phrase "bits of entropy" and can explain what that means and why that's an important concept, then you are speaking far beyond your level of knowledge.