If you live in an area where you need a VPN to keep your ISP off your ass, well you’re in luck because the Torrentio plug-in is compatible with Debrid services (Real-Debrid is a good one). They’re cheaper than a VPN (less than €3/mo) and get you direct downloads which ISPs don’t care about since you’re not distributing files like you would with a torrent client. What’s nice is that they work with any torrent—not just video—so you can download wherever you want at 1gbps speeds so long as the torrent has at least one seed. Since you’re not actually interacting with the torrents themselves, there’s no need for a VPN.
Setup is easy. The only thing you need to do is install the Stremio app on your TV, then open it and install the Torrentio plug-in. From there you configure your preferences like preferred resolution, language, etc, enter your Debrid service credentials if you have them; after that you install additional plug-ins for the kind of content you want. I’d recommend starting off with the Streaming Catalogs (lists popular content from Netflix, Amazon, Disney HBO, etc.)and Trakt.tv plug-ins (recommends content based on your viewing habits). There’s also plug-ins for anime if that’s your thing. Once you install the plug-ins you like, the only thing left to do is pick something to watch and enjoy. :)
You can also download the Stremio app to your phone and configure everything from there if you don’t want to fumble with doing all of this with the TV remote. I’d recommend doing it this way so that all you have to do on the TV is fire up the Stremio app and enjoy.
I’m not the person to ask this kind of question to. I use DNS-level tracking protection in my router (via NextDNS), but I’m not a privacy expert.
If you’re living in a country where censorship is a thing and/or privacy is of upmost importance, then you should still use a VPN in addition to a Debrid service with Stremio. Or you can nix the Debrid and just use a VPN if you don’t mind more buffering and all the downsides that come with torrents. (VPNs can be setup to run on a TV through DNS settings either on your router or TV itself, though this may not be 100% secure. Again, I’m not an expert.)