Combining multi-factor authentication, the principle of least privilege, and device health checks can significantly reduce the scope of damage attackers can cause after a vulnerability is exploited.