Update: thanks for the suggestions and the other thread. I did the following: - blocked anonymous callers from calling (unrelated but related) - created an ad

Update: thanks for the suggestions and the other thread. I did the following: - blocked anonymous callers from calling (unrelated but related) - created an admin account on his machine and removed his admin privileges (his use case for the computer hasn't changed in 10+ years and he can call me if he needs to install something) - set up a router with a static IP that I can VPN into and SSH into his machine to make changes if necessary - froze his credit (unrelated, but again...) - set up two factor authentication on bank and email - set up pihole DNS in Google cloud with ads and malware blocked. I'd consider a whitelist but don't care to review his "normal" urls. DNS is set from the router. - block extensions on chrome I didn't get a chance to configure the DNS on the Chromebook. Overall a fun weekend project.