In line with the PG's recommendations, what should be the minimum requirements for a secure Arch Linux installation?

Thanks for the links @dngray. I have an additional question. As articulated in another post I made, would it be useful to utilize fscrypt to encrypt my home directory on top of LUKS in order to encrypt my data while my laptop is on but logged off?