Iphone with ADP and Lockdown.
GrapheneOS
BIOS Password
Secure and Measured boot / TPM
Full Disk Encryption
usbguard
random mac
user management
Mendatory Access Control
hardened memory allocator
cpu microcode sec
Device Integrety and attestation
Encrypted Backups.
updates
proxy
pfsense
iptables
portmaster safing
UAC
Group Policy