Generally speaking... my brain. Basically every attack on macOS at this point is either from fishing or through human interaction hacking and not because someone can easily infect the computer.
I do have a bunch of things I'm running for privacy and connection management like Little Snitch. And undoubtedly that does "help". But still the primary thing is me.