@ze Having an OpenWRT router helps. You can then play around with DNSSEC and DoH, adblock etc..

I'm in clearnet via one of a few VPN's for a good amount of time and have MAC spoof operating so that helps.

What leaks in particular are you potentially concerned by?

Also, here's a great list of tests you can perform to check: https://www.whonix.org/wiki/Dev/Leak_Tests