> Nothing cargo cult about enabling SE Linux, restricting access with IP tables, configuring AuditD and AIDE.

These are great ways to massively overcomplicate your system. Generally speaking, having encountered these tools, do not use them unless you're willing to dedicate about 2x the time you would otherwise spend administering the system.