Ask HN: Your approach to security on the Mac

Other than running only signed apps, using a password manager, running regular updates & using a firewall, how do you secure a Mac?

I'm not a fan of running active AV protection, but would run regular scans.