Don't forget, the linux distros are only as secure as the person using them. They're not incredibly secure or anything as they sit.
Learning linux's file permissions, its iptables, those are important to start. Get a decent a-v, something like clam or similar, something with a good ruleset out of the box.
Then other things like vpn, possibly even tor, are important. Having your bases covered on your OS is fundamental though before vpn and/or tor imo/ime.
I did use tor. But honestly, if your bases are set with your os and a-v, file permissions, iptables, then a vpn should be enough for what you're wanting it for, save that you have your browser configured properly also.
Also make sure if/when you get a vpn that it's not leaking your isp's dns resolver. Make sure the vpn provider is using dns resolution within the said country for whichever server you end up tunneling through.
Also, a big part of being more secure on the net comes from being wise to correlation. Correlation is a very powerful tool for said agencies.