Security is more than just the software and hardware you are running. It also the strategies you employ, which you've hinted at. You can minimize your risk exposure by taking certain key steps:

1. hardware switches for microphones, cameras

2. restrict when and what you connect to on your devices

3. using air gapped devices when necessary

4. use different devices for different activities

the list of course goes on and on. it depends on what your security needs are. Security does not end with software and hardware mitigation, it only begins there.