Anti-malware

Built-in antiwalware: XProtect should be running on your Mac laptops by default. From the docs it looks like a basic signature-based detection (i.e. good starting point, could be improved by switching to more modern behavior-based detection).

Multi-Factor Authentication

Enable 2FA on Apple ID: https://support.apple.com/en-us/HT204915