I'm still using Mojave (of which Catalina is the last iteration of the 32bit-capable and HFS+capable platform "early California" OS template, although Apple made it extremely cumbersome to reenable those features.)
Tips and observations:
1. Don't use Safari for anything. For the same reason you didn't use Internet Explorer in Windows. --Virus-writers and page-hijackers always target an OS's stock browser. On a Mac, use Firefox, Waterfox, Opera, Brave, and Vivaldi.
2. The biggest piece of malware on a Mac is Apple's own "security" software, which seems expressly designed to thrash drives (especially rotational drives) to pieces. This was a huge problem during the El Capitan / Sierra / High Sierra arc during boot-up, when MRT ("malicious removal tool"), Spotlight indexing, and myriad launchdaomons were all hammering the boot drive simultaneously to point memory usage would skyrocket (forcing caching on the drive!) and the spinning-wheel-of-wait-forever became a common sight. Terminal tricks to disable both MRT and Spotlight solved many of these problems. Fortunately, Mojave seems to be largely trouble free in this regard.
3. Open Library > LauchAgents and LaunchDeamons. Drag any Adobe and Microsoft specimens to a neutral folder, and restart. (This will turn off a lot of irksome phone-home behavior in those apps.)
4. If you are not running 32bit apps from a fast HFS+ partition, I'm not seeing a great reason to cease upgrading at Catalina given that you've already forfeited the vast existing library of 32bit apps and are now stuck with mostly subscription-model software. (The stock photos of California scenery are still available, so you're not stuck with the ugly new background wallpapers from Big Sur onward.)
Catalina runs much better on my machines than Mojave, and long ago I got rid of all 32 bit apps (or runs them trough Cloud conputing).
I both use Brave and Safari; but I actually still finds Safari extremely safe on Mac (even older versions that is no longer supported).
I disagree with the Security software on Catalina as well, it has only been serving my machines very well … I can go around it with a few terminal commands if I have to, but it Blocks if something or someone tries to install anything without me knowing it (experienced it many times), and it keeps the root parts of the system authentic.
I might try 3) but my Catalina Machines are running flawless … my biggest problems is 1) Apple trying to force me to update to big sur and beyond 2) Software updates and newer software that no longer is compatible with Catalina but demands a newer version to work (not that big småproblemer yet though).
Catalina does not run 32 bit apps, Mojave was the last one to do that, but I find my machines runs allot better on Catalina than Mojave and also I no longer use 32 bit apps.
With all that said, I’m glad I’m not the only one clinging to other stuff than the absolut newest.
They should have choosen to provide updates for Catalina for allot more years …