Most of which only apply if you have local untrusted users or are running particular software.

You can give up if you like, but I still believe it's possible to set up secure systems.