TLDW :

1. do not trust random nodes, go and host your own (locally or not) -> to prevent them from logging ip addresses and to deanonymize on the IP level (attacking dandelion from what i understand ?)
2. if you do end up using a remote node, connect to it through tor to maintain anonymity
3. Stay off centralised exchanges, never KYC.