Use a VPN service with a proven track record to connect to a seedbox paid for with crypto, and download only from top-level private trackers. It's about as secure as you can get as a casual user.
In reality, though, a simple VPN is probably enough. Maybe not even that if you're in a country that doesn't give a shit.