How hard would it be to protect my identity from anyone finding out who I am? I know domains always have a $10/year option for privatizing your registration information but is there any other protection I should think about having?
It's against TOS to leave false WHOIS information, so the best way your opponents can attack you is by taking the domain down.
Always use the $10/year privacy service, then everyone cannot see you've left false information.
Then feel free to enter all fake info, and use a proxy while doing it, and whenever you update your website.
I know a dude in Kansas who used 123 Elm St. as his address when he registered his domain names (plural).