01
Erase + reinstall
Recovery Mode
02
FileVault
Full-disk encrypt
03
MDM / privacy
Telemetry down
04
Outbound FW
Little Snitch-class
1. Factory Reset
- Erase the Mac and reinstall macOS via Recovery Mode.
- Enable FileVault during setup.
- Create a new admin account with a strong passphrase.
2. Core Hardening
Run the recommended scripts and apply MDM profiles for:
- Disabling unnecessary services
- Enforcing strong passwords
- Controlling iCloud and telemetry
3. Key Privacy Steps
- Disable Siri, Spotlight suggestions, and analytics
- Use Little Snitch or Lulu for outbound control
- Enable Gatekeeper + XProtect
- Require password after sleep