2) Always run the latest available Linux distro - so in case of Ubuntu go for 19.10 - and always have all updates installed.