You do not harden against everything. You decide what you are protecting and who from, then do the work that fits. Answer five questions and this builds your plan: the measures that close your threats, ranked, each with what it costs you and where it stops.
The five questions are the Army's OPSEC process in plain language: identify what needs protecting, know the adversary, judge likelihood and consequence, weigh the cost. Privacy Guides asks the same five. "Everything is a trade-off. There is high security, but never full security."
Answer all five to build your plan.