- Keep frequent backup copies of
/etcand/home. - Always read PKGBUILDs before installing and updating AUR packages.
- Read https://wiki.archlinux.org/title/Security and https://wiki.archlinux.org/title/List_of_applications/Security#Privilege_elevation .
- Install and configure a user-space mandatory access control program.
- Use a self-hosted open source VPN to connect to your home network from outside.
- Install and configure UFW (firewall).
- Do not use
lightdm.