Use a VPN service with a proven track record to connect to a seedbox paid for with crypto, and download only from top-level private trackers. It's about as secure as you can get as a casual user.

In reality, though, a simple VPN is probably enough. Maybe not even that if you're in a country that doesn't give a shit.

I2P is the safest way.

Otherwise an open source client such qbittorrent or transmission on an open source os such as Linux with a VPN provider whose privacy policy you are happy with. The most important thing is to bind your torrent client to the VPN interface inside the torrent client settings.

There are more technical setups to automate parts of the process but learn to walk before you can run.

If you use a VPN and torrent on your own pc, bind it in your torrent clients settings!

Seed box. That's all you need.

I2P if you do not want to pay for VPN or Seedbox :)

I2p

Real Debrid & RDT Client

Tribler

I2P +biglyBT configured to use i2p only + not needed