macOS Security and Privacy Guide
I'm somewhat surprised that this guide recommends Homebrew. I agree that using a package manager is a good way to keep software updated from a central, trusted repository--always a good thing--but Homebrew makes a number of trade-offs for convenience instead of security. MacPorts has most of the same common packages and doesn't mess up filesystem permissions like Homebrew does. If I remember correctly, the all-inside-the-home-directory technique used in this guide is unsupported by the Homebrew developers as well.<p>See <a href="https://saagarjha.com/blog/2019/04/26/thoughts-on-macos-package-managers/" rel="nofollow">https://saagarjha.com/blog/2019/04/26/thoughts-on-macos-pack...</a> for a more nuanced take on this.