The best and easiest way of keeping your machine secure, is to constantly upgrade all of its components. Not only a few selected apps like Chrome, but all components, including the git command, the SSL/TLS libraries and so on. Below, I list the commands I use on the different platforms I frequent (plus Windows).
# apt-get update && apt-get upgrade
# pacman -Syu
$ paru -Syu
# dnf upgrade
# yum upgrade
# syspatch
# pkg_add -u
# softwareupdate -i -a
$ brew upgrade
c:\> winget upgrade --all
As always, # means the command should be executed as root or with
sudo and $ means the command should be executed by your regular
user.