I was thinking of just using GUFW, a hardened browser, NordVPN, and NordVPN's DNS. Will this be enough to secure my Ubuntu machine? Should I add something?
Seems covered by me! uBlockOrigin works on Linux too I believe. This may be a bit overkill though. HTTPS works inside Ubuntu too! Again, this may be a bit overkill too.
My ElementaryOS partition is equipped with Chromium browser (HTTPS Everywhere, NoScript, uBlock Origin, Norton Safe Web), VPN and Comodo DNS. The rest is knowledge on browsing and basic security. Do not install or give sudo permissions to anything you do not know what it is. Stick to the store's software or be sure what you're installing.
I checked it out, but it seems like a lot of work to set up. Besides, I struggle downloading a program, I don't think I'll be using app armor any time soon.
That should be a perfectly fine setup as long as you follow simple rules such as only installing from trusted sources (such as the official repositories).