Only use #opensource software, and if you ever need to use any proprietary one, do it on an as much as possible isolated environment: a Linux container, a BSD jail, a virtual machine, or a dedicated physical system on a militarized zone of your network.