I’m conscious that, while I will sometimes tinker with various measures more or less for fun, my security bathtub is by no means completely watertight, so my day-to-day online presence really has no more guarantees than the typical Facebook user’s. I think a more useful strategy would be to just have the insecure presence, but think about how / whether you could also run a Snowden-type presence when you’re really thinking about it.
That said, being tracked in a thousand databases is better than being tracked in two thousand, so by all means do the obvious stuff like blocking (some) trackers and avoiding (actually logging into) Facebook.