IMHO the same reasoning applies for the personal machine - you can reduce the risks quite significantly, but you should expect that you won't be able to fully s

IMHO the same reasoning applies for the personal machine - you can reduce the risks quite significantly, but you should expect that you won't be able to fully secure it and after the basics (like keeping up to date with patches and not running unusually untrustworthy software) are done, the next most effective steps would be more about mitigating the consequences in the case the machine is compromised, not expecting to be able to prevent it from being compromised. It's not a common occurrence to get your machine owned, but it's also not entirely preventable, some risk is always there. Like, for personal use - have offline backups that protect you if your machine gets ransomwared; don't keep the keys to your cryptoinvestments on the same machine as the VSCode plugins OP mentioned; etc.