I found nice little security-focused guide on hardening macOS.