Any security configuration advisable after install?

Are there any security things I should set up or configure after installing Trixie for normal desktop use?

I would assume that Debian ship it in good shape out of the box. Or should I look at things like firewall and apparmor?