Official guidance recommends disabling diagnostic routes such as profiling unless necessary, restricting the network exposure of monitoring endpoints, and adding authentication and rate limiting to monitoring interfaces.