Since no one else said it: knowing local laws. Vpn always requires you to trust someone else again. I’d rather go ahead and make myself a proxy or something elsewhere then.

Technical knowledge too. But say you know downloading from filehosters can not result in you getting into trouble, voila, do that.

Good browser, adblock, habits and more things add to a best practice.