I don’t think anything can monitor or mess with your local web traffic once you have encrypted DNS.
VPNs don’t add any privacy over HTTPS+DoH. Installing CA certs and whatnot is insane.
Stop getting your opsec advice from influencers on youtube. It’s snake oil.