What should be enabled for Enhanced Security?

I am not very well versed in this area, so I would appreciate some guidance on what should be enabled or disabled. My app is an AppKit app. I have read the documentation and watched the video, but I find it hard to understand.

When I added the Enhanced Security capability in Xcode, the following options were enabled automatically:

Memory Safety

  • Enable Enhanced Security Typed Allocator

Runtime Protections

  • Enable Additional Runtime Platform Restrictions
  • Authenticate Pointers
  • Enable Read-only Platform Memory

The following options were disabled by default:

Memory Safety

  • Enable Hardware Memory Tagging
    • Memory Tag Pure Data
    • Prevent Receiving Tagged Memory
    • Enable Soft Mode for Memory Tagging

Should I enable these options? Is there anything I should consider disabling?

What should be enabled for Enhanced Security?
 
 
Q