If you run a tor relay, and encrypt all traffic, and do not store data locally, and make sure not to do any other nefarious activity online. There are legal resources to help you. But yes, it is a very very very shitty experience if the alphabet agencies come knocking. Expect to be audited, and have your employer and family members interviewed.