Yea a lot of this advice “don’t use anything from Google/Microsoft/Facebook/amazon” or “avoid social media” is just going to tell newcomers that privacy isn’t for them

Instead go in order

• secure private messaging since that’s where a lot of your personal private info is going (use Signal)
• switch to Firefox over chrome, it’ll do all the same things
• use bitwarden (or keepass, but that one is a bit more technical) to manage your passwords, and generate random passwords for things you can reset easily

All of these are easy, don’t have much of a learning curve, and will give them significant gains privacy wise. Also I’m betting they will continue to learn and do more stuff after that.