This is really close.

I do this shit for a living.

OP, go download Firefox and then go to https://stigviewer.com/stigs
And find Firefox. This will cover all known low level security controls. This will keep you from ever being vulnerable in the first place. Just follow the fix text for each control you care about and you’re done.

While you’re at it, go through the windows controls. Hope you know regedit.