Prevent subscribers/members from wp-admin
A user of my new FC community helpfully scolded me for allowing him access to wp-admin by default, as well as author archive pages. I found some snippets one can add to a child theme to help lock down an FC site:
https://www.malcare.com/blog/restrict-admin-access-on-wordpress/
They have their own dedicated plugin for this https://wordpress.org/plugins/fluent-security/