Lots of different methods. But the big thing is this.

Isolation is key. Many Different devices/accounts for different functions etc