Privacy, Security, Anonymity, Convenience
Confirmed
Four goals, four threat models
A lot of bad advice comes from collapsing four distinct goals into one word. “Is this private?” is not the same question as “is this secure?”, “is this anonymous?”, or “is this convenient?” Each answers a different threat model, and improving one often costs you another. Decide which you actually need before you pick a tool.
Privacy
Privacy is about who gets to collect and correlate data about you when they know who you are. Your bank knows your identity; privacy is whether it sells your transaction history. Privacy controls limit collection and linkage, not necessarily visibility.
Security
Security is about keeping unauthorized parties from reading, altering, or destroying your data. Full-disk encryption, a password manager, MFA, and patching are security. You can be perfectly secure and have zero privacy — a well-defended account whose provider still profiles everything you do.
Anonymity
Anonymity is about breaking the link between an action and your identity. Tor Browser aims at anonymity; a VPN mostly does not — it moves trust to the VPN provider and is defeated by logging into an identified account. Anonymity is the hardest to achieve and the easiest to accidentally destroy with one authenticated request.
Convenience
Convenience is the currency you spend on the other three. Every privacy or security control has a usability cost; a control so painful you disable it protects nothing. Good engineering minimizes that cost rather than pretending it doesn't exist.
The “never use Chrome” trap
Blanket advice like “everyone must stop using Chrome” skips the only useful questions: who benefits, what risk it addresses, what tradeoff it introduces, and what it does not solve. A privacy-focused browser can reduce cross-site tracking and telemetry — a real benefit for someone whose threat model is advertising surveillance. It does not make you anonymous, does not secure a reused password, and may break sites or enterprise tooling you depend on. For a user who is signed into the same account everywhere, switching browsers changes very little about linkage. Match the tool to the threat; don't adopt a slogan.
Sustainable habits
The durable wins are boring and cheap: a password manager with unique credentials, MFA on the accounts that matter, device encryption, keeping software patched, and a little deliberate account separation (work vs. personal vs. throwaway). These reduce real exposure for almost everyone, at low convenience cost, without requiring you to become an anonymity researcher. Reserve the heavy anonymity tooling for the specific situations that actually need it.
Related
- Unveiling the Dark Side of JavaScript Confirmed
- JavaScript Without the Dark Side Confirmed