run this on your mac:
curl -sSL https://raw.githubusercontent.com/yawnbox/macos_hardening/main/harden.sh | sudo bash
if using zsh:
curl -sSL -o harden.sh https://raw.githubusercontent.com/yawnbox/macos_hardening/main/harden.sh && chmod +x harden.sh && sudo bash ./harden.sh