Would be interested in hearing other things that HN'ers do to limit risk. Mostly the same basics as you. The document you linked is a good starting point. I'd

Would be interested in hearing other things that HN'ers do to limit risk. Mostly the same basics as you. The document you linked is a good starting point. I'd add extensive use of virtualisation and sandboxing. I run less and less software as native, installed applications on any device I use personally or professionally. Instead it tends to run inside things like VMs or Docker containers or cloud-hosted platforms now. My basic policy is to try and make every device and installed application expendable/replaceable in case anything breaks or gets compromised and then focus on the data. I apply the principle of least privilege for access to any sensitive data, try to keep all important data in standardised formats and avoid lock-in effects as much as reasonably possible, and keep good back-ups under my own control with the ability to redeploy/restore anything quickly and as automatically as possible.