It is much harder for malware to install without you becoming aware if the account you are logged in with does not have permission to install applications. This post will show you how to disable admin permissions on your Mac.

macOS Encryption: Enable FileVault

Under GDPR if a lost/stolen laptop contains personal data you will have to report it to your country's Supervisory Authority (SA) within 72 hours or risk a fine. This post shows you how to enable FileVault on macOS to encrypt your computer.