The same suggestions have been made over and over. Here's one from a decade ago: https://ia801200.us.archive.org/1/items/SyScanArchiveInfocon/SyScan%202014%20S

The same suggestions have been made over and over. Here's one from a decade ago: https://ia801200.us.archive.org/1/items/SyScanArchiveInfocon/SyScan%202014%20Singapore/SyScan%202014%20presentations/SyScan2014_JoxeanKoret_BreakingAntivirusSoftware.pdf https://ia801200.us.archive.org/1/items/SyScanArchiveInfocon... It incudes glaringly obvious advice like designing your code around the principle of least privilege or sandboxing code that handles untrusted input. Unfortunately, not much has changed since then.