The advice you are getting so far sucks. The default security settings on macOS are easy to bypass: https://www.macchaffee.com/blog/2023/hacking-myself/

Unfortunately these are design weaknesses, so any "software stack" would just be a bandaid.