You'll also need to use dnscurve. Setup an RPI as your local DNS resolver using dnscurve and have your router hand out your rpi as your lan's DNS resolver. None of this matters if you rent your router from your isp
No doubt, seems like there's a lot of opportunity to set up some clear-cut guides for dummies like me to protect ourselves. Kinda surprised there isn't a general guide from a VPN provider, would be a great opportunity to both upsell their services and promote whatever their staff (probably) care a great deal about (internet privacy).
