Standard accounts are recommended by Apple itself as a best practice in lieu of administrator accounts. Also, sudo is not available in standard accounts which protects against any would-be vulnerability.
I updated the post regarding application sources.
I changed Google DNS with Cloudflare's 1.0.0.1. Others also mentioned the fact that suggesting a VPN provider is risky, so I also removed it.
I know some steps are redundant coming from a brand new installation, but not everyone is willing to format their drive right now, so those steps are included as well.
Again, thanks for the feedback!