The biggest thing is being deliberate about your threat model. Who would want to get onto your systems, and how much do they care about you in particular? Fro

The biggest thing is being deliberate about your threat model. Who would want to get onto your systems, and how much do they care about you in particular? From there, take appropriate actions. For the vast, vast majority of us, that means using good passwords, updating software, and not running weird things from the internet. If you’re worried about 0 click RCE in Chrome/Windows/iOS, you either should be getting better advice from folks outside of HN, or are being unrealistic about who is coming after you.