I’d add: use 2 factor authentication everywhere you are able. At minimum, email accounts and bank logins. If you can swing the cost for a service like DeleteMe, that helps with data brokers. Use a secure password manager and have unique passwords everywhere.