How do you stay the most private?

In my case, i've taken these baby steps:

- VPN

- 2FA (no sms)

- Location services turned off

- I use brave and tor as my browsers and DDG as my search engine.

At this point of my life i can't delete facebook because i need it to communicate using messenger, my fb account is deactivated.

What else could i do?

Is there a way to hide history from ISP?. I have my browser set to automatically delete my history every time i close it. But can they still see if i went to pornhub, banking website, bitcoin exchanges, and basically everything?

Thank you...