Bruce Schneier has a good high-level look at threat-modeling under an authoritarian government. Alas, it’s not amenable to a simple recipe approach, but involves carefully thinking through the tradeoffs: https://www.schneier.com/blog/archives/2025/09/digital-threat-modeling-under-authoritarianism.html

I thought the section in this screenshot was an especially good point.