Sometimes userland tmpfs seems attractive. XDG already provided the solution.
All articles of tag: AppArmor
Debian stretch AppArmor and minimum security (2nd.)@guide
Enabling AppArmor on Debian stretch.
Debian manual network and security settings@guide
Network and APT setting for first update, and minimum security packages.