Anyway, I would set up two partitions, one with a decoy Windows install, 2nd one hidden with LUKS encrypted Linux and Windows in a virtual machine.
WWAN can be Airalo ordered with fake details/via VPN. Or if you are not going to travel, a local prepaid SIM card assuming registration isn't required.