Oddbean new post about login | logout You forgot using almost exclusively using GNU/Linux operating systems and Free/Libre Open-Source Software. That's another attack vector. I would know this, because I follow what I had just described, and even harden my OS's kernel too. It's simple as that.
To clarify, the operating system you use on your computer, that you bought, is also an attack vector. With GNU/Linux operating systems, this isn't an issue.