Thanks for the replies.
I'm trying to mitigate all possible threats that can be realistically mitigated without getting a degree in cybersecurity or mangling my online life too much (like Tor did). I like to learn and beef things up, but I can't spend time getting too geeky on raspberry pi etc.
I use eero Secure+ to help protect my home network, and I think there's a firewall built into eero even without the Secure+ subscription for all my home tech? (I'm going to look at whether I really need Secure+ anymore, since I ditched their annoying VPN and switched to Proton VPN. I would need a Malwarebytes substitute on MacOS and just pay OOP for 1PW like I used to.)
Anyway, I had read that I should have use the MacOS firewall on my laptop for when I leave the home network. I already use a VPN on my computer and iPhones both at home and when I'm away (except for those few pesky sites that won't let me in while using it, and then I forget to turn it back on grrrr).