Set up 2FA/MFA for all of your accounts wherever supported. It's probably one of the few easier things you can do that is missing from your list, and you will vastly improve your security posture for it.
I just use Google authenticator but there are plenty of other apps out there if you'd prefer something else.
The article appears to be paywalled. Can anyone post the contents or another website that doesn't paywall their journalism?