My advice for secure online banking and shopping is to follow the recommendation of your bank and online shops. Most banks will list their approved web browsers that which they will guarantee against online banking theft. And in doing so, they also need to record your log-in information which I had found out myself with my bank to dispute online charges! So using Tor or a VPN unfortunately can delay or dismissed online charge disputes. So keep that in mind.
I use Edge because it's what is most recommended by banks and financial institutions and while it has its weaknesses, using an approved online browser can help you in your online disputes of any bank charges or activities.
Otherwise, for anything else, I use Brave for both PC, Mac, Android and iOS.
For online shopping, I again use Edge mainly because they can track where the originating transaction began. So if you also want to dispute any online charges, it's good not to use a VPN, Tor services to mask your geolocation. The majority of online shopping sites require an HTTPS connection anyhow, so you're pretty safe and secure against cyber-theft.
If you need to do online banking and shopping, try to use your own internet at home or use your cell data plan. Never use a public WIFI to conduct any sort of online banking and shopping, unless you are protected by a VPN.
One of the things most people do today to secure their browsing is to use a third party DNS resolver like Cloudflare, OpenDNS, CIRA etc and they will provide cyber security protection from malware and phishing sites and making sure that when you type in your bank website address, it points to the bank and not some fake phantom bank sites that steal your password and data, because your home internet router can be hijacked with malware too! If your home internet router does not come with a monthly security updates regiment or you are not rebooting your router every night, then you need a third party trusted DNS resolver to ensure that your malware compromised router isn't pointing a website address to something else.
http://www.routersecurity.org will have more information about this.
What I found personally myself is that, you don't want to bank anonymously, because you want the bank to track you and make sure you are the person doing the online banking and not some dude somewhere using Tor or a VPN with your credentials stealing your money. You'll have a more difficult time disputing your online banking charges if they deemed your transactions unproven due to the history of your banking. That's what happened to me when I.T determined that someone somewhere else tried to get into my bank account through a Tor or VPN. So don't hide yourself too much when you are banking or investing, because banks I found these days are becoming very stingy on refunding charges they deemed unproven, unless you have a premier account like $100,000 and up and they see you more of a capital business than a liability.
What you need to make absolutely sure is that your computer has the latest up-to-date OS and security patches, up-to-date browsers and you bank at home or from a cell plan that they can identify you with your IP address. As long as your computer has no malware, virus and keylogger stuff to steal your password, use the recommended bank browsers and ONLY BANK with a BANK that provides online theft protection and follow the guidelines in order to qualify for that online theft protection.
The best security is not some fancy software or hardware, but really yourself and how well you keep your computer up to date and how you connect to your bank or online shopping sites, because no matter how careful you are with security, no one is better than a hacker. Just look at those companies that spent millions of dollars trying to prevent ransomware and still these hackers got in. If the hackers want your money, they will find a way to get it.
I used to work for a non-profit IT firm awhile back before the pandemic and I had met journalists who thought they were protected by Tor and their VPN and their encrypted VPN email like ProtonMail and YET, they all got hacked, because they mess with people like the NSA and these people have unlimited resources to break into any system including Tor, ProtonVPN and encrypted mail services. It depends on how bad these people want to hurt and they can hurt you financially, so if you're a normal person making an honest living, you just do what's enough for your browsing security. Spending more money isn't going to guarantee you 100% security. Nothing is. All these ads you see pro porting to sell you better security is just a potential unrealised gain in security. Use common sense with online banking and shopping and the common browsers and updated security patches will provide you a reasonable safe banking and shopping experience.
Hope this helps.