Thanks for this comment. I had not come across that hardening guide. It is extremely well written, and it’s worth a read, even if you have no intention of trying to harden your system, just to see what’s out there.

I’d consider most of it overkill for my threat model, but there are some things I’ll probably implement or try out just because they look pretty neat.