Ask HN: How do you secure your Mac?

Apart from full disk encryption and a password manager:

Do you use antivirus? Which antivirus?

Do you use two-factor SSH?

Do you use IDS?

What else do you recommend?