Different OS, different architecture (ARM64), M1 hardware security, NextDNS. Those alone eliminate 99% of malware. Restricted privileges and my most important protection: backup. When something is off I troubleshoot and roll back the entire system by a week.