Prism Break is also worth taking a look: https://prism-break.org/en/
I like that it has OS-specific recommendations.
I like that it has OS-specific recommendations.
It wouldn't be that hard to provide a sentence-long justification for their avoids in addition to their recommendations.