I have one of these. However it is connected to a VPN 24/7 in my own home. It can't access the net without the VPN being connected and I've checked for IP leaks.

https://github.com/qdm12/gluetun

However at some point I will have a machine setup in a foreign country as a jump box.