I put it this way when people ask about VPN + Tor. Who do you trust.
If you have VPN → Tor → Website, you are hiding the fact that you are on Tor from your ISP but you are not hiding it from whoever is hosting your VPN. Why do you trust them more than your ISP? They may say “We don’t keep logs” but all you can do is take them at their word.
If you have Tor → VPN → Website, you are at least hiding the fact you are using Tor from the website, but you are then you are showing your VPN what websites you are going to. It’s just scrambling the trust.
Personally, for my thread model, I trust the Tor network but I know that I can’t access a lot of website using it. I use a paid VPN for streaming services that are geoblocked. I also have a personal openvpn instance running on a VPS. This is for foreign banking which blocks Tor, commercial VPN providers, and my local ISP.
It’s not a one size fits all solution but it is tailor made for me. We can’s tell you what will work best for you. Only you can do that.